Lucene search
PRIOn knowledge basePRION:CVE-2022-4329HistoryJan 02, 2023 - 10:15 p.m.
Cross site scripting
2023-01-0222:15:00
PRIOn knowledge base
www.prio-n.com
4
woocommerce
wordpress
plugin
cross-site scripting
reflected
vulnerability
parameter
outputting
page
authenticated
unauthenticated
admin
0.001 Low
EPSS
Percentile
43.1%
The Product list Widget for Woocommerce WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users (such as high privilege one like admin).
| CPE | Name | Operator | Version |
|---|---|---|---|
| product_list_widget_for_woocommerce | le | 1.0 |
Related
wpvulndb
wpvulndb
Product list Widget for Woocommerce <= 1.0 - Reflected XSS
2022-12-08 00:00:00
cve
cve
CVE-2022-4329
2023-01-02 22:15:17
cvelist
cvelist
CVE-2022-4329 Product list Widget for Woocommerce <= 1.0 - Reflected XSS
2023-01-02 21:49:38
wpexploit
wpexploit
Product list Widget for Woocommerce <= 1.0 - Reflected XSS
2022-12-08 00:00:00
nvd
nvd
CVE-2022-4329
2023-01-02 22:15:17