Lucene search
N/APATCHSTACK:CBE8D370EA3CEA4A6DC90B981C52C99CHistoryFeb 24, 2015 - 12:00 a.m.
WordPress WooCommerce Plugin <= 2.2.10 - XSS
2015-02-2400:00:00
N/A
patchstack.com
6
0.003 Low
EPSS
Percentile
69.2%
Because of this vulnerability, an attacker can inject arbitrary web script or HTML via the QUERY_STRING in the wc-reports page to wp-admin/admin.php.
Solution
Update to version 2.2.11.
| CPE | Name | Operator | Version |
|---|---|---|---|
| woocommerce | le | 2.2.10 |
Related
checkpoint_advisories
checkpoint_advisories
WordPress WooCommerce Plugin Cross-Site Scripting (CVE-2015-2069)
2015-03-08 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2017-07-28 06:27:00
cve
cve
CVE-2015-2069
2015-02-24 17:59:05
cvelist
cvelist
CVE-2015-2069
2015-02-24 17:00:00
nvd
nvd
CVE-2015-2069
2015-02-24 17:59:05
prion
prion
Cross site scripting
2015-02-24 17:59:00
wpvulndb
wpvulndb
WooCommerce <= 2.2.10 - Cross-Site Scripting (XSS)
2015-02-22 00:00:00
kaspersky
kaspersky
KLA10491 Multiple vulnerabilities in WordPress plugins
2015-03-17 00:00:00