WordPress WooCommerce Plugin < 6.6.0 Stored HTML Injection Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2022-2099

creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:58+00:00| seen| https://t.me/cibsecurity/46398 2023-04-18 01:39:16+00:00| seen| https://t.me/TYGYE/541 2023-04-27 22:58:00+00:00| seen| https://t.me/TYGYE/593 2025-07-16 03:32:30+00:00| seen| https://t.me/s4TechBots/45...

CVE-2022-2099 WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...