Lucene search
WpvulndbWPVDB-ID:A78D75B2-85A0-41EB-9720-C726CA2E8718HistoryApr 17, 2023 - 12:00 a.m.
Japanized For WooCommerce < 2.5.8 - Reflected XSS
2023-04-1700:00:00
wpscan.com
7
japanized
woocommerce
cross-site scripting
reflected xss
security vulnerability
peachpay
0.001 Low
EPSS
Percentile
43.0%
The plugin does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
PoC
With the PeachPay payment gateway enabled (can be enabled via the settings: http://example.com/wp-admin/admin.php?page=wc4jp-options&tab;=payment) Make a logged in admin open the following URL: https://example.com/wp-admin/admin.php?page=peachpay&tab;=field&">
| CPE | Name | Operator | Version |
|---|---|---|---|
| woocommerce-for-japan | lt | 2.5.8 |
Related
cve
cve
CVE-2023-0948
2023-05-08 14:15:12
prion
prion
Cross site scripting
2023-05-08 14:15:00
cvelist
cvelist
CVE-2023-0948 Japanized For WooCommerce < 2.5.8 - Reflected XSS
2023-05-08 13:58:03
nvd
nvd
CVE-2023-0948
2023-05-08 14:15:12
nuclei
nuclei
WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting
2023-06-05 07:03:16
wpexploit
wpexploit
Japanized For WooCommerce < 2.5.8 - Reflected XSS
2023-04-17 00:00:00
wordfence
wordfence