CVE-2022-0234CWE-79

CVE-2022-0234: fallo en WOOCS – Currency Switcher for WooCommerce.

WOOCS < 1.3.7.5 - Reflected Cross-Site Scripting

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear WOOCS – Currency Switcher for WooCommerce. Professional and Free multi currency plugin – Pay in selected currency

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

18Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 1.8%
The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocs_in_order_currency parameter of the woocs_get_products_price_html AJAX action (available to both unauthenticated and authenticated users) before outputting it back in the response, leading to a Reflected Cross-Site Scripting
Productos afectados
Unknown · WOOCS – Currency Switcher for WooCommerce. Professional and Free multi currency plugin – Pay in selected currency
CVEs relacionadas — WOOCS – Currency Switcher for WooCommerce.

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-25043—WOOCS < 1.3.7.3 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2021-24938—WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site ScriptingEPSS 0.8%