Custom Woocommerce Checkout Fields Editor Security Vulnerabilities and Issues — Custom Woocommerce Checkout Fields Editor CVE List

ThemelocationCustom Woocommerce Checkout Fields Editor

1 matches found

CVE•added 2024/03/23 1:57 a.m.•48 views

CVE-2024-1697

CVE-2024-1697 affects the Custom WooCommerce Checkout Fields Editor plugin for WordPress, up to version 1.3.1. Root cause: insufficient input sanitization and output escaping in save_wcfe_options, enabling Stored XSS. Impact: authenticated users with subscriber+ access can inject scripts that exe...

6.4CVSS7.6AI score0.0043EPSS