Woocommerce Cross-site Scripting via Additional tax classes field when taxes are enabled

2022-05-2419:02:37

CWE-79

GitHub Advisory Database

github.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

When taxes are enabled, the “Additional tax classes” field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfiltered_html is disabled

CPENameOperatorVersion
woocommerce/woocommercelt5.2.0

CPE	Name	Operator	Version
	woocommerce/woocommerce	lt	5.2.0

References

github.com/advisories/GHSA-mp46-7x6q-f28m

github.com/woocommerce/woocommerce/commit/6ede8c5f59aec3ca70aa27d1ffd5a6574473f2ce

nvd.nist.gov/vuln/detail/CVE-2021-24323

wpscan.com/vulnerability/6d262555-7ae4-4e36-add6-4baa34dc3010