CVE-2021-25085CWE-79

CVE-2021-25085: falha em WOOF – Products Filter for WooCommerce

WOOF - Products Filter for WooCommerce < 1.2.6.3 - Reflected Cross-Site Scripting

Publicada em · Atualizada em

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 1.7%
The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woof_redraw_elements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting