Lucene search
HistoryFeb 24, 2015 - 5:59 p.m.
CVE-2015-2069
woocommerce
plugin
xss
vulnerability
wordpress
cve-2015-2069
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING in the wc-reports page to wp-admin/admin.php.
Affected configurations
Node
woothemeswoocommerceRange≤2.2.10wordpress
| CPE | Name | Operator | Version |
|---|---|---|---|
| woothemes:woocommerce | woothemes woocommerce | le | 2.2.10 |
Related
checkpoint_advisories
checkpoint_advisories
WordPress WooCommerce Plugin Cross-Site Scripting (CVE-2015-2069)
2015-03-08 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2017-07-28 06:27:00
prion
prion
Cross site scripting
2015-02-24 17:59:00
patchstack
patchstack
WordPress WooCommerce Plugin <= 2.2.10 - XSS
2015-02-24 00:00:00
nvd
nvd
CVE-2015-2069
2015-02-24 17:59:05
wpvulndb
wpvulndb
WooCommerce <= 2.2.10 - Cross-Site Scripting (XSS)
2015-02-22 00:00:00
cvelist
cvelist
CVE-2015-2069
2015-02-24 17:00:00
kaspersky
kaspersky
KLA10491 Multiple vulnerabilities in WordPress plugins
2015-03-17 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Related for CVE-2015-2069