Product Enquiry for WooCommerce < 3.1 - Unauthenticated Stored XSS

2023-11-1600:00:00

wpscan.com

woocommerce

stored xss

unauthenticated users

security issue

AI Score

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

Description The plugin does not sanitise and escape some parameters, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks

References

patchstack.com/database/vulnerability/gm-woocommerce-quote-popup/wordpress-product-enquiry-for-woocommerce-plugin-3-0-cross-site-scripting-xss-vulnerability-2