Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22326
HistoryMar 16, 2022 - 12:00 a.m.

WordPress Persian Woocommerce Cross-Site Scripting Vulnerability

2022-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

43.5%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Persian Woocommerce suffers from a cross-site scripting vulnerability that stems from not escaping the s parameter before exporting it back to the properties of the admin dashboard, which can be exploited by attackers to conduct reflective cross-site scripting attacks.

CPENameOperatorVersion
wordpress persian woocommercele5.8.0

0.001 Low

EPSS

Percentile

43.5%