WordPress WooCommerce Plugin < 6.6.0 Stored HTML Injection Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2022-31201

SoftGuard Web SGW before 5.1.5 allows HTML injection...

CVE-2022-31201

SoftGuard Web SGW before 5.1.5 allows HTML injection...

CVE-2022-31201

SoftGuard Web SGW before 5.1.5 allows HTML injection...

Design/Logic Flaw

SoftGuard Web SGW before 5.1.5 allows HTML injection...

CVE-2022-31201

SoftGuard Web SGW before 5.1.5 allows HTML injection...

CVE-2022-31201

CVE-2022-31201 affects SoftGuard Web (SGW) prior to 5.1.5. An HTML injection vulnerability in SGW enables injection within the web interface. Public records describe impact as the ability to access arbitrary files and download them via the vulnerable SGW SNMP Network Management Extension. The iss...

CVE-2022-2099

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

CVE-2022-2099

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

Design/Logic Flaw

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

CVE-2022-2099 WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

CVE-2022-2099

CVE-2022-2099 affects the WooCommerce WordPress plugin prior to 6.6.0. The issue is a stored HTML injection vulnerability caused by insufficient escaping/sanitizing in the payment gateway titles, enabling injection into stored content. Impact is limited to sites running WooCommerce versions befor...

CVE-2022-2099 WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

CVE-2022-31201: Improper Neutralization of Input During Web Page Generation

SoftGuard Web SGW before 5.1.5 allows HTML injection...

PT-2022-14857 · WordPress · Woocommerce

Name of the Vulnerable Software and Affected Versions: WooCommerce WordPress plugin versions prior to 6.6.0 Description: The issue is related to stored HTML injection due to a lack of escaping and sanitizing in the payment gateway titles. This allows for potential malicious code injection...

PT-2022-20608

Name of the Vulnerable Software and Affected Versions SoftGuard Web SGW versions prior to 5.1.5 Description The issue allows HTML injection. Recommendations For versions prior to 5.1.5, update to version 5.1.5 or later to resolve the issue...

CVE-2022-2099: Improper Encoding or Escaping of Output

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 23 / 9.0.0 < 9.0.0 Patch 16 Multiple Vulnerabilities

According to its self-reported version number, Zimbra Collaboration Server is affected by a multiple vulnerabilities, including the following: - An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0. To exploit the vulnerability, an attacker would...

IBM CICS TX Advanced HTML Injection Vulnerability

IBM CICS TX Standard and Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. An HTML injection vulnerability exists in IBM CICS TX Standard and Advanced version 11.1. The vulnerability stems from...

CVE-2022-22682: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in Event Management in Synology Calendar before 2.4.5-10930 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...