Lucene search

CVE-2024-9895 Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode

🗓️ 15 Oct 2024 08:12:29Reported by WordfenceType

Smart Online Order for Clover plugin Stored XS

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-9895	15 Oct 202409:15	–	nvd
CVE	CVE-2024-9895	15 Oct 202409:15	–	cve
Cvelist	CVE-2024-9895 Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode	15 Oct 202408:29	–	cvelist
Patchstack	WordPress Smart Online Order for Clover Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)	15 Oct 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 14, 2024 to October 20, 2024)	24 Oct 202415:33	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/clover-online-orders/trunk/moo_OnlineOrders.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e7263e89-94b2-42e6-a7ed-a86579ce649e
wordpress	www.wordpress.org/plugins/clover-online-orders/
plugins	www.plugins.trac.wordpress.org/browser/clover-online-orders/trunk/includes/shortcodes/checkoutPage.php
plugins	www.plugins.trac.wordpress.org/browser/clover-online-orders/trunk/moo_OnlineOrders.php
plugins	www.plugins.trac.wordpress.org/changeset/3168433/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Oct 2024 08:29Current

5.8Medium risk

Vulners AI Score5.8

CVSS36.4

EPSS0.001

SSVC

CWE-79