Lucene search
WpvulndbWPVDB-ID:FB6DFD45-B5DD-40BD-BD23-4945FC00E4B9HistoryJun 21, 2023 - 12:00 a.m.
WooCommerce Product Vendors < 2.1.77 - Reflected XSS
2023-06-2100:00:00
wpscan.com
7
woocommerce product vendors
reflected cross-site scripting
parameter sanitization
admin privilege
0.001 Low
EPSS
Percentile
19.7%
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PoC
Make a logged in admin open a page with the code below html>
| CPE | Name | Operator | Version |
|---|---|---|---|
| woocommerce-product-vendors | lt | 2.1.77 |
Related
nvd
nvd
CVE-2023-33332
2023-05-28 19:15:09
cve
cve
CVE-2023-33332
2023-05-28 19:15:09
prion
prion
Cross site scripting
2023-05-28 19:15:00
wpvulndb
wpvulndb
WooCommerce Product Vendors < 2.1.77 - Unauthenticated Reflected XSS
2023-05-24 00:00:00
cvelist
cvelist
wpexploit
wpexploit
WooCommerce Product Vendors < 2.1.77 - Reflected XSS
2023-06-21 00:00:00
wordfence
wordfence