Lucene search

K
wpvulndbWpvulndbWPVDB-ID:C3BF11BC-84C7-4AEA-AB47-3EEEFD669771
HistoryOct 20, 2023 - 12:00 a.m.

Product Category Tree <= 2.5 - Reflected XSS

2023-10-2000:00:00
wpscan.com
4
plugin
reflected cross-site scripting
high privilege users

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

20.2%

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

20.2%

Related for WPVDB-ID:C3BF11BC-84C7-4AEA-AB47-3EEEFD669771