WooCommerce Pre-Orders < 2.0.1 - Contributor+ Stored XSS

2023-06-2100:00:00

wpvulndb

The plugin does not validate and escape its layout shortcode attribute before outputting it back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

[woocommerce_pre_order_countdown product_id="64" layout="'-alert(/XSS/)-'"]

64 being a product set as a pre-order with an availability date in the future

References

patchstack.com/database/vulnerability/woocommerce-pre-orders/wordpress-woocommerce-pre-orders-plugin-2-0-0-contributor-stored-cross-site-scripting-xss-vulnerability

JSON

Related for WPEX-ID:A86BDCFB-A1DB-4775-8F30-8EEC3F53A77A