Lucene search
WpvulndbWPEX-ID:A78D75B2-85A0-41EB-9720-C726CA2E8718HistoryApr 17, 2023 - 12:00 a.m.
Japanized For WooCommerce < 2.5.8 - Reflected XSS
2023-04-1700:00:00
wpvulndb
134
japanized
woocommerce
2.5.8
reflected xss
peachpay
payment gateway
admin
url
exploit
0.001 Low
EPSS
Percentile
43.0%
The plugin does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
With the PeachPay payment gateway enabled (can be enabled via the settings: http://example.com/wp-admin/admin.php?page=wc4jp-options&tab=payment)
Make a logged in admin open the following URL: https://example.com/wp-admin/admin.php?page=peachpay&tab=field&"><script>alert(/XSS/)</script>Related
cve
cve
CVE-2023-0948
2023-05-08 14:15:12
wpvulndb
wpvulndb
Japanized For WooCommerce < 2.5.8 - Reflected XSS
2023-04-17 00:00:00
prion
prion
Cross site scripting
2023-05-08 14:15:00
cvelist
cvelist
CVE-2023-0948 Japanized For WooCommerce < 2.5.8 - Reflected XSS
2023-05-08 13:58:03
nvd
nvd
CVE-2023-0948
2023-05-08 14:15:12
nuclei
nuclei
WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting
2023-06-05 07:03:16
wordfence
wordfence