Lucene search
WpvulndbWPEX-ID:9CCA6538-8962-4810-92F9-77BDA4EF8BF5HistoryMay 31, 2022 - 12:00 a.m.
Germanized for WooCommerce < 3.9.5 - Reflected Cross-Site Scripting
2022-05-3100:00:00
wpvulndb
118
germanized woocommerce security
The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting
https://example.com/wp-admin/admin.php?page=wc-settings&tab=germanized&a"><script>alert(/XSS/)</script>