FOX – Currency Switcher Professional for WooCommerce < 1.4.1.7 - Subscriber+ Stored XSS

2023-12-2600:00:00

wpscan.com

woocommerce

currency switcher

stored xss

security vulnerability

plugin

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.2%

JSON

Description The plugin does not sanitise and escape its currency options parameters, which could allow any authenticated users, such as subscribers to perform Stored Cross-Site Scripting attacks

CPENameOperatorVersion
eq1.4.1.7

CPE	Name	Operator	Version
		eq	1.4.1.7

References

www.wordfence.com/threat-intel/vulnerabilities/id/8cb37019-33f6-4f72-adfc-befbfbf69e47