Lucene search
Krzysztof ZającWPVDB-ID:DE69BCD1-B0B1-4B16-9655-776EE57AD90AHistoryFeb 01, 2022 - 12:00 a.m.
Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
2022-02-0100:00:00
Krzysztof Zając
wpscan.com
7
0.001 Low
EPSS
Percentile
21.6%
The plugin does not escape the rowCount parameter before outputting it back in an attribute via the woosea_categories_dropdown AJAX action (available to any authenticated user), leading to a Reflected Cross-Site Scripting
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| woo-product-feed-pro | lt | 11.0.7 |
Related
prion
prion
Cross site scripting
2022-03-07 09:15:00
cve
cve
CVE-2022-0426
2022-03-07 09:15:09
wpexploit
wpexploit
Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
2022-02-01 00:00:00
cnvd
cnvd
WordPress Product Feed PRO for WooCommerce Plugin跨站脚本漏洞
2022-03-09 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-0426
2022-03-07 09:15:09