Lucene search
Rafie Muhammad (Patchstack)PATCHSTACK:7338C5C7B031A32D717210D0A8A9702EHistoryJul 18, 2023 - 12:00 a.m.
WordPress WUPO Group Attributes for WooCommerce Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)
2023-07-1800:00:00
Rafie Muhammad (Patchstack)
patchstack.com
1
wordpress
wupo group attributes
woocommerce plugin
cross site scripting
xss
vulnerable version
patch
medium severity
unauthenticated
cve-2023-33999
AI Score
6.3
Confidence
Low
Software
WUPO Group Attributes for WooCommerce
Type
Plugin
Vulnerable versions
<= 2.3.2
Fixed in
2.3.3
OWASP Top 10
A3: Injection
Classification
Cross Site Scripting (XSS)
CVE
CVE-2023-33999
Patch priority
Medium
CVSS severity
Medium (7.1)
Developer
Claim ownership
PSID
510f0d97de42
Credits
Rafie Muhammad (Patchstack)
Required privilege
Unauthenticated
Published
18 July, 2023
Expand full details Have additional information or questions about this entry? Let us know.
Solution
We advise to mitigate or resolve the vulnerability immediately.
Affected configurations
Node
wupo_pluginswupo_group_attributes_for_woocommerceRange≤2.3.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wupo_plugins | wupo_group_attributes_for_woocommerce | * | cpe:2.3:a:wupo_plugins:wupo_group_attributes_for_woocommerce:*:*:*:*:*:*:*:* |
Related
wpvulndb
wpvulndb
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
2023-07-25 00:00:00
patchstack
patchstack