2 matches found
CVE-2021-24940
The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which could lead to a Reflected Cross-Site Scripting issue...
6.1CVSS0.01439EPSS
SaveExploits2References1
CVE-2021-24940: Improper Neutralization of Input During Web Page Generation
The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which could lead to a Reflected Cross-Site Scripting issue...
6.1CVSS6.4AI score0.01439EPSS
SaveExploits2References2
20