WooCommerce WordPress plugin before 6.6.0 vulnerable to stored HTML injection

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-2099 · ADVISORY
• woocommerce/woocommerce · PACKAGE
• wpscan.com/vulnerability/0316e5f3-3302-40e3-8ff4-be3423a3be7b · WEB

Lỗ hổng khác của woocommerce/woocommerce

• CVE-2024-37297TRUNG BÌNH 5.4WooCommerce is an open-source e-commerce platform built on WordPress. A vulnerability introduced in WooCommerce 8.8 allows for cross-site sc…
• CVE-2021-24323TRUNG BÌNH 4.8When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashb…
• CVE-2020-29156TRUNG BÌNH 5.3The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter …
• CVE-2019-20891CAO 8.8WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with resultant stored cross…