CVE-2022-1673

MEDIO 6.1CVE-2022-1673 · Published 08/06/2022 · updated 17/06/2026

In breve

CVE-2022-1673 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda woocommerce green wallet gateway (greenwallet).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.80%, superiore al 56.8% delle vulnerabilità.
Correzione: aggiornare a 1.0.2 o successiva.

Package	Affected versions	Patched versions
woocommerce green wallet gateway greenwallet	`< 1.0.2`	`1.0.2`

Description

The WooCommerce Green Wallet Gateway WordPress plugin before 1.0.2 does not escape the error_envision query parameter before outputting it to the page, leading to a Reflected Cross-Site Scripting vulnerability.

References

wpscan.com/vulnerability/14283389-a6b8-4dd8-9441-f16fcc4ab3c0 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free