CVE-2021-24169: vulnerability in Advanced Order Export For WooCommerce
Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 10%
from disclosure to weapon171 days
Published on NVDApr 5
1st PoC+171d
This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS.
Affected products
Unknown · Advanced Order Export For WooCommercepublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/50324unverifiedcve_referencepacketstormsecurity.com/files/164263/WordPress-Advanced-Order-Export-For-WooCommerce-3.1.7-Cross-Site-Scripting.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.