Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2023/12/15 2:59 p.m.29 views

CVE-2023-49185 WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder WP & WooCommerce Search allows Reflected XSS.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.1.7...

7.1CVSS7.2AI score0.00403EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/11/29 12:0 a.m.17 views

WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Doofinder for WooCommerce Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49185 Patch priority Medium CVSS severity Medium 7.1 Developer Doofinder PSID 6796f29d2414 Credits Phd Required privilege...

7.1CVSS6.6AI score0.00403EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder