CVE-2022-0234

CVE-2022-0234 affects the WordPress WOOCS – Currency Switcher for WooCommerce plugin up to version 1.3.7.5. The vulnerability arises because the plugin does not sanitize/escape the woocs_in_order_currency parameter in the AJAX action woocs_get_products_price_html, exposed to both unauthenticated ...