Lucene search
K

5 matches found

NVD
NVD
added 2026/05/13 4:16 p.m.4 views

CVE-2020-37174

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS payloads in design tab textfields. Attackers can inject JavaScript code through fields like 'Text for block toggle' a...

5.5CVSS0.00037EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/13 2:22 p.m.6 views

CVE-2020-37174 WOOF / Products Filter Professional for WooCommerce 1.2.3 Persistent XSS

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS payloads in design tab textfields. Attackers can inject JavaScript code through fields like 'Text for block toggle' a...

5.5CVSS5.7AI score0.00037EPSS
Exploits0References4
CVE
CVE
added 2026/05/13 2:22 p.m.8 views

CVE-2020-37174

The CVE-2020-37174 entry concerns WOOF Products Filter for WooCommerce version 1.2.3, which has a persistent cross-site scripting (XSS) vulnerability. According to the description, authenticated attackers can inject JavaScript payloads via design tab textfields (e.g., Text for block toggle and Cu...

5.5CVSS5.7AI score0.00037EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/13 2:22 p.m.23 views

CVE-2020-37174 WOOF / Products Filter Professional for WooCommerce 1.2.3 Persistent XSS

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS payloads in design tab textfields. Attackers can inject JavaScript code through fields like 'Text for block toggle' a...

5.5CVSS0.00037EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.5 views

PT-2026-40617

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS payloads in design tab textfields. Attackers can inject JavaScript code through fields like 'Text for block toggle' a...

5.5CVSS5.7AI score0.00037EPSS
Exploits0References5
Rows per page
Query Builder