CVE-2025-22337

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin Order Audit Log for WooCommerce order-audit-log-for-woocommerce allows Reflected XSS.This issue affects Order Audit Log for WooCommerce: from n/a through = 2.0...

CVE-2025-22337

creationtimestamp| type| source ---|---|--- 2025-01-13 14:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdturv42f 2025-01-13 16:14:22+00:00| seen| https://t.me/cvedetector/15147...

CVE-2025-22337

CVE-2025-22337 is a Reflected XSS vulnerability in the WordPress plugin Order Audit Log for WooCommerce (Infosoft) affecting versions up to 2.0. The flaw stems from improper input neutralization during web page generation, enabling reflected cross-site scripting. The Red Hat advisory (RH:CVE-2025...

CVE-2025-22337 WordPress Order Audit Log for WooCommerce plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin Order Audit Log for WooCommerce order-audit-log-for-woocommerce allows Reflected XSS.This issue affects Order Audit Log for WooCommerce: from n/a through = 2.0...