Lucene search

K
wpvulndbWpvulndbWPVDB-ID:4F97E915-1E6D-44DE-A7D3-CB0C07A27B8D
HistorySep 07, 2023 - 12:00 a.m.

Kangu para WooCommerce < 2.2.10 - Reflected XSS

2023-09-0700:00:00
wpscan.com
8
woocommerce plugin xss admin privilegeescalation

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

27.9%

Description The plugin does not sanitise and escape the etiqueta parameters before outputting it back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

27.9%

Related for WPVDB-ID:4F97E915-1E6D-44DE-A7D3-CB0C07A27B8D