Lucene search
WpvulndbWPVDB-ID:FB6DFD45-B5DD-40BD-BD23-4945FC00E4B9HistoryJun 21, 2023 - 12:00 a.m.
WooCommerce Product Vendors < 2.1.77 - Reflected XSS
2023-06-2100:00:00
wpscan.com
10
woocommerce product vendors
reflected cross-site scripting
parameter sanitization
admin privilege
EPSS
0.001
Percentile
18.4%
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PoC
Make a logged in admin open a page with the code below html>
Related
nvd
nvd
CVE-2023-33332
2023-05-28 19:15:09
cvelist
cvelist
prion
prion
Cross site scripting
2023-05-28 19:15:00
wpvulndb
wpvulndb
WooCommerce Product Vendors < 2.1.77 - Unauthenticated Reflected XSS
2023-05-24 00:00:00
wpexploit
wpexploit
WooCommerce Product Vendors < 2.1.77 - Reflected XSS
2023-06-21 00:00:00
cve
cve
CVE-2023-33332
2023-05-28 19:15:09
wordfence
wordfence