CVE-2023-5325

creationtimestamp| type| source ---|---|--- 2023-12-17 08:36:44+00:00| seen| https://t.me/ctinow/155535...

CVE-2023-5325 Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS

The Woocommerce Vietnam Checkout WordPress plugin before 2.0.6 does not escape the custom shipping phone field no the checkout form leading to XSS...

CVE-2023-5325

CVE-2023-5325 affects the WooCommerce Vietnam Checkout WordPress plugin prior to version 2.0.6. The root cause is lack of escaping/cleanup of the custom shipping phone field on the checkout form, causing unauthenticated stored XSS. Public PoC details and descriptions across multiple sources confi...