WordPress Customer Reviews for WooCommerce plugin <= 5.47.0 - Reflected Cross-Site Scripting via 's' vulnerability

Reflected Cross-Site Scripting via 's' vulnerability discovered by Krzysztof Zając in WordPress Plugin Customer Reviews for WooCommerce versions = 5.47.0...

CVE-2023-0424 MS-Reviews <= 1.5 - Subscriber+ Stored XSS

The MS-Reviews WordPress plugin through 1.5 does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks...

MS-Reviews <= 1.5 - Subscriber+ Stored XSS

The plugin does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks As a subscriber, submit a review a page/post with msreviews embed with the following payload: alert/XSS/ The XSS will be triggered...

CVE-2018-0603

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...