Lucene search

PRIOn knowledge basePRION:CVE-2023-49828

HistoryDec 14, 2023 - 3:15 p.m.

Cross site scripting

2023-12-1415:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

input neutralization

web application security

automattic

woopayments

vulnerability

nvd

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo allows Stored XSS.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 6.4.2.

CPENameOperatorVersion
woopaymentslt6.5.0

CPE	Name	Operator	Version
	woopayments	lt	6.5.0

References

patchstack.com/database/vulnerability/woocommerce-payments/wordpress-woopayments-plugin-6-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve