Lucene search
Veracode Vulnerability DatabaseVERACODE:13373HistoryFeb 26, 2019 - 1:54 a.m.
Cross-Site Scripting (XSS)
2019-02-2601:54:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
31.5%
woocommerce/woocommerce is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the Photoswipe caption parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| woocommerce/woocommerce | le | 3.5.4 |
Related
openvas
openvas
WordPress WooCommerce Plugin < 3.5.5 XSS Vulnerability
2019-02-28 00:00:00
WordPress WooCommerce Plugin < 3.5.5 XSS Vulnerability - Windows
2019-02-28 00:00:00
wpvulndb
wpvulndb
WooCommerce <= 3.5.4 - Stored Cross-Site Scripting (XSS)
2019-02-20 00:00:00
patchstack
patchstack
nvd
nvd
CVE-2019-9168
2019-02-26 00:29:00
cve
cve
CVE-2019-9168
2022-10-03 16:19:39
checkpoint_advisories
checkpoint_advisories
WordPress WooCommerce Plugin Cross-site Scripting (CVE-2019-9168)
2019-03-05 00:00:00
prion
prion
Cross site scripting
2019-02-26 00:29:00
osv
osv
CVE-2019-9168
2019-02-26 00:29:00
cvelist
cvelist
CVE-2019-9168
2022-10-03 16:19:39