EUVD-2021-21314

Malware in sbrugna...

CVE-2021-34664

The Moova for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the lat parameter in the /Checkout/Checkout.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5...

CVE-2021-34664

The Moova for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the lat parameter in the /Checkout/Checkout.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5...

CVE-2021-34664 Moova for WooCommerce <= 3.5 Reflected Cross-Site Scripting

The Moova for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the lat parameter in the /Checkout/Checkout.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5...

CVE-2021-34664

The CVE-2021-34664 entry documents a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Moova for WooCommerce . The issue is triggered by the lat parameter in the file path ~/Checkout/Checkout.php, allowing injection of arbitrary scripts in vulnerable versions up to 3.5. M...

CVE-2021-34664 Moova for WooCommerce <= 3.5 Reflected Cross-Site Scripting

The Moova for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the lat parameter in the /Checkout/Checkout.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5...

PT-2021-20632

Name of the Vulnerable Software and Affected Versions: Moova for WooCommerce WordPress plugin versions up to and including 3.5 Description: The issue allows attackers to inject arbitrary web scripts via the lat parameter in the /Checkout/Checkout.php file, enabling Reflected Cross-Site Scripting...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. The Moova for WooCommerce plugin for WordPres...

CVE-2021-34664: Improper Neutralization of Input During Web Page Generation

The Moova for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the lat parameter in the /Checkout/Checkout.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5...

Moova for WooCommerce < 3.8 - Reflected Cross-Site Scripting

The plugin does not escape the lat parameter of the moovacustomfields AJAA action available to both unauthenticated and authenticated users before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue PoC...

WordPress Moova for WooCommerce plugin <= 3.6 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Moova for WooCommerce plugin versions = 3.6. Solution Update the WordPress Moova for WooCommerce plugin to the latest available version at least 3.8...