Lucene search
+L

3 matches found

Mend
Mend
•added 2021/09/10 1:32 p.m.•7 views

CVE-2021-38349

The Integration of Moneybird for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the errordescription parameter found in the /templates/wcmb-admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.1.1...

6.1CVSS0.00895EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/09/10 12:00 a.m.•11 views

PT-2021-22069

Name of the Vulnerable Software and Affected Versions Moneybird for WooCommerce WordPress plugin versions up to and including 2.1.1 Description The issue allows attackers to inject arbitrary web scripts via the error description parameter found in the /templates/wcmb-admin.php file, enabling...

6.1CVSS0.00895EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/10 12:00 a.m.•9 views

CVE-2021-38349: Improper Neutralization of Input During Web Page Generation

The Integration of Moneybird for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the errordescription parameter found in the /templates/wcmb-admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.1.1...

6.1CVSS5.7AI score0.00895EPSS
SaveExploits1References3
Rows per page
Query Builder