Lucene search
PRIOn knowledge basePRION:CVE-2022-2575HistorySep 16, 2022 - 9:15 a.m.
Cross site scripting
2022-09-1609:15:00
PRIOn knowledge base
www.prio-n.com
2
wbw currency switcher
woocommerce wordpress
stored cross-site scripting
0.001 Low
EPSS
Percentile
25.0%
The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| wbw_currency_switcher_for_woocommerce | lt | 1.6.6 |
Related
nvd
nvd
CVE-2022-2575
2022-09-16 09:15:10
cvelist
cvelist
cve
cve
CVE-2022-2575
2022-09-16 09:15:10
wpvulndb
wpvulndb
WBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSS
2022-08-22 00:00:00
wpexploit
wpexploit
WBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSS
2022-08-22 00:00:00