WordPress 우커머스 네이버페이 plugin <= 3.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via mnp_purchase Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via mnppurchase Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin 우커머스 네이버페이 versions = 3.3.7...

PT-2024-16846 · WordPress · 우커머스 네이버페이

Name of the Vulnerable Software and Affected Versions: 우커머스 네이버페이 plugin for WordPress versions up to, and including, 3.3.7 Description: The issue is related to Stored Cross-Site Scripting via the plugin's mnp purchase shortcode due to insufficient input sanitization and output escaping on...