Cross site scripting

2024-01-0817:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

web page generation

laybuy

woocommerce

stored xss

vulnerability

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Stored XSS.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9.

CPENameOperatorVersion
laybuy_payment_extension_for_woocommercele5.3.9

CPE	Name	Operator	Version
	laybuy_payment_extension_for_woocommerce	le	5.3.9

References

patchstack.com/database/vulnerability/laybuy-gateway-for-woocommerce/wordpress-laybuy-payment-extension-for-woocommerce-plugin-5-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve