CVE-2022-2090

MEDIUM 6.1CVE-2022-2090 · Published 17/07/2022 · updated 17/06/2026

In short

CVE-2022-2090 is a MEDIUM (CVSS 6.1) vulnerability affecting discount rules for woocommerce (flycart).
Chance of exploitation in the next 30 days (EPSS): 0.79%, higher than 56.4% of all vulnerabilities.
Fix: update to 2.4.2 or later.

Package	Affected versions	Patched versions
discount rules for woocommerce flycart	`< 2.4.2`	`2.4.2`

Description

The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting

References

wpscan.com/vulnerability/0201f365-7acb-4640-bd3f-7119432f4917 · Exploit

More vulnerabilities in discount rules for woocommerce

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free