CVE-2022-2090: Improper Neutralization of Input During Web Page Generation

The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting...

PT-2022-14850

Name of the Vulnerable Software and Affected Versions Discount Rules for WooCommerce WordPress plugin versions prior to 2.4.2 Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly escaped before being outputted in an attribute on th...