Lucene search

K
wpexploitWpvulndbWPEX-ID:71AA9460-6DEA-49CC-946C-D7D4BF723511
HistoryFeb 21, 2023 - 12:00 a.m.

Japanized For WooCommerce < 2.5.5 - Reflected XSS

2023-02-2100:00:00
wpvulndb
42
japanized
woocommerce
reflected xss
security
exploit

0.006 Low

EPSS

Percentile

78.0%

The plugin does not sanitise and escape the tab parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

https://example.com/wp-admin/admin.php?page=wc4jp-options&tab=a</script><svg/onload=alert(/XSS/)>

0.006 Low

EPSS

Percentile

78.0%

Related for WPEX-ID:71AA9460-6DEA-49CC-946C-D7D4BF723511