13 matches found
EUVD-2021-25669
Malware in sbrugna...
WordPress WooCommerce myghpay Payment Gateway plugin cross-site scripting vulnerability
The WooCommerce myghpay Payment Gateway plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in the WordPress WooCommerce myghpay Payment Gateway plugin, which stems from /processresponse. php's clientref parameter lacks a data validation filter for...
CVE-2021-39308
The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...
CVE-2021-39308
The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...
Cross site scripting
The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...
CVE-2021-39308 WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting
The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...
CVE-2021-39308 WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting
The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...
CVE-2021-39308
Vulnerability summary (CVE-2021-39308) : The WordPress plugin “WooCommerce myghpay Payment Gateway” is vulnerable to Reflected Cross-Site Scripting via the clientref parameter in ~/processresponse.php, affecting versions up to 3.0. The issue can allow injection of arbitrary JavaScript in the clie...
WooCommerce myghpay Payment Gateway <= 3.0 - Reflected Cross-Site Scripting
The plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...
PT-2021-22516
Name of the Vulnerable Software and Affected Versions: WooCommerce myghpay Payment Gateway WordPress plugin versions up to and including 3.0 Description: The issue allows attackers to inject arbitrary web scripts via Reflected Cross-Site Scripting, utilizing the clientref parameter in the...
WordPress plugin cross-site scripting vulnerability
The WooCommerce myghpay Payment Gateway plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in the WordPress WooCommerce myghpay Payment Gateway plugin, which stems from /processresponse. php's clientref parameter lacks a data validation filter for...
WordPress myghpay WooCommerce Payment Gateway plugin <= 3.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress myghpay WooCommerce Payment Gateway plugin versions = 3.0. Solution Deactivate and delete. This plugin has been closed as of December 13, 2021 and is not available for download. This closure is temporary, pending a...
CVE-2021-39308: Improper Neutralization of Input During Web Page Generation
The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...