CVE-2022-0234CWE-79

CVE-2022-0234: falha em WOOCS – Currency Switcher for WooCommerce.

WOOCS < 1.3.7.5 - Reflected Cross-Site Scripting

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar WOOCS – Currency Switcher for WooCommerce. Professional and Free multi currency plugin – Pay in selected currency

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 1.8%
The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocs_in_order_currency parameter of the woocs_get_products_price_html AJAX action (available to both unauthenticated and authenticated users) before outputting it back in the response, leading to a Reflected Cross-Site Scripting
Produtos afetados
Unknown · WOOCS – Currency Switcher for WooCommerce. Professional and Free multi currency plugin – Pay in selected currency
CVEs relacionadas — WOOCS – Currency Switcher for WooCommerce.

No mesmo produto, das mais perigosas para as menos.

CVE-2021-25043—WOOCS < 1.3.7.3 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2021-24938—WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site ScriptingEPSS 0.8%