Lucene search
Veracode Vulnerability DatabaseVERACODE:4802HistoryJul 30, 2017 - 7:18 a.m.
Cross-site Scripting (XSS)
2017-07-3007:18:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
59.7%
woocommerce is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary webscript through the range parameter in the wc-reports page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| woocommerce/woocommerce | le | 2.2.2 |
References
seclists.org/fulldisclosure/2014/Sep/59
secunia.com/advisories/61377
raw.githubusercontent.com/woocommerce/woocommerce/master/CHANGELOG.txt
security.dxw.com/advisories/reflected-xss-in-woocommerce-excelling-ecommerce-allows-attackers-ability-to-do-almost-anything-an-admin-user-can-do
wordpress.org/plugins/woocommerce/changelog
Related
wpvulndb
wpvulndb
WooCommerce <= 2.2.2 - Reflected Cross-Site Scripting (XSS)
2014-09-17 00:00:00
patchstack
patchstack
prion
prion
Cross site scripting
2014-10-14 14:55:00
cvelist
cvelist
CVE-2014-6313
2014-10-14 14:00:00
nvd
nvd
CVE-2014-6313
2014-10-14 14:55:06
cve
cve
CVE-2014-6313
2014-10-14 14:55:06