CVE-2022-1673

The WooCommerce Green Wallet Gateway WordPress plugin before 1.0.2 does not escape the errorenvision query parameter before outputting it to the page, leading to a Reflected Cross-Site Scripting vulnerability...

CVE-2022-1673

The CVE-2022-1673 entry concerns the WooCommerce Green Wallet Gateway WordPress plugin (pre-1.0.2). The vulnerability arises from not escaping the error_envision query parameter before it is output on the checkout page, causing a Reflected Cross-Site Scripting (XSS) vulnerability. Affected versio...