Lucene search
Alex SanfordWPVDB-ID:1187E041-3BE2-4613-8D56-C2394FCC75FBHistoryMay 01, 2023 - 12:00 a.m.
Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting
2023-05-0100:00:00
Alex Sanford
wpscan.com
26
woocommerce
reflected cross-site scripting
security issue
url parameters
plugin
EPSS
0.001
Percentile
31.2%
The plugin does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting.
PoC
Ensure WooCommerce is installed. Visit the following path, while logged in as an Admin: /wp-admin/admin.php?page=ppom&productmeta;_id=5&do;_meta=edit&">=1
Related
cvelist
cvelist
prion
prion
Cross site scripting
2023-05-30 08:15:00
wpexploit
wpexploit
nvd
nvd
CVE-2023-2256
2023-05-30 08:15:10
cve
cve
CVE-2023-2256
2023-05-30 08:15:10
wordfence
wordfence