Lucene search
PRIOn knowledge basePRION:CVE-2022-0426HistoryMar 07, 2022 - 9:15 a.m.
Cross site scripting
2022-03-0709:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
21.6%
The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the woosea_categories_dropdown AJAX action (available to any authenticated user), leading to a Reflected Cross-Site Scripting
| CPE | Name | Operator | Version |
|---|---|---|---|
| product_feed_pro_for_woocommerce | lt | 11.2.3 |
Related
wpexploit
wpexploit
Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
2022-02-01 00:00:00
cnvd
cnvd
WordPress Product Feed PRO for WooCommerce Plugin跨站脚本漏洞
2022-03-09 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-0426
2022-03-07 09:15:09
cve
cve
CVE-2022-0426
2022-03-07 09:15:09
wpvulndb
wpvulndb
Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
2022-02-01 00:00:00