2 matches found
CVE-2019-9168
WooCommerce before 3.5.5 allows XSS via a Photoswipe caption...
6.1CVSS5.7AI score0.00983EPSS
SaveExploits0References1
CVE-2019-9168
CVE-2019-9168 affects the WordPress WooCommerce plugin prior to version 3.5.5. The vulnerability is a cross-site scripting (XSS) flaw in the Photoswipe caption handling, where user-supplied data in the caption can be interpreted as script. The root cause is insufficient sanitization of the captio...
6.1CVSS5.8AI score0.00983EPSS
SaveExploits0References1Affected Software1
20