PT-2022-13155

Name of the Vulnerable Software and Affected Versions Advanced Product Labels for WooCommerce WordPress plugin versions prior to 1.2.3.7 Description The issue arises from the lack of sanitization and escaping of the tax color set type parameter in the berocket apl color listener AJAX action's...

CVE-2022-0399: Improper Neutralization of Input During Web Page Generation

The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the taxcolorsettype parameter before outputting it back in the berocketaplcolorlistener AJAX action's response, leading to a Reflected Cross-Site Scripting...