Lucene search
China National Vulnerability DatabaseCNVD-2021-101668HistoryDec 19, 2021 - 12:00 a.m.
WordPress WooCommerce myghpay Payment Gateway plugin cross-site scripting vulnerability
2021-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
0.001 Low
EPSS
Percentile
26.2%
The WooCommerce myghpay Payment Gateway plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in the WordPress WooCommerce myghpay Payment Gateway plugin, which stems from ~/processresponse. php’s clientref parameter lacks a data validation filter for user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress woocommerce myghpay payment gateway plugin | le | 3.0 |
Related
cvelist
cvelist
wpvulndb
wpvulndb
WooCommerce myghpay Payment Gateway <= 3.0 - Reflected Cross-Site Scripting
2021-12-14 00:00:00
prion
prion
Cross site scripting
2021-12-14 16:15:00
cve
cve
CVE-2021-39308
2021-12-14 16:15:08
patchstack
patchstack
nvd
nvd
CVE-2021-39308
2021-12-14 16:15:08