CVE-2022-0234

The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocsinordercurrency parameter of the woocsgetproductspricehtml AJAX action available to both unauthenticated and authenticated users before outputting it back in the response, leading to a Reflected Cross-Site Scripting...

CVE-2022-0234

The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocsinordercurrency parameter of the woocsgetproductspricehtml AJAX action available to both unauthenticated and authenticated users before outputting it back in the response, leading to a Reflected Cross-Site Scripting...

PT-2022-13053

Name of the Vulnerable Software and Affected Versions WOOCS WordPress plugin versions prior to 1.3.7.5 Description The issue concerns a Reflected Cross-Site Scripting problem. It arises because the woocs in order currency parameter of the /wp-admin/admin-ajax.php AJAX action woocs get products...