CVE-2019-1010124

2019-07-2300:00:00

dwf

www.cve.org

0.003 Low

EPSS

Percentile

65.6%

JSON

WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS). The impact is: XSS to RCE via editing theme files in WordPress. The component is: admin/partials/woo-feed-manage-list.php:63. The attack vector is: Administrator must be logged in.

CNA Affected

[
  {
    "vendor": "WebAppick",
    "product": "WooCommerce Product Feed",
    "versions": [
      {
        "version": "≤ 2.2.18",
        "status": "affected"
      }
    ]
  }
]