RSS   Vulnerabilities for 'Woocommerce currency switcher'   RSS

2021-12-06
 
CVE-2021-24938

CWE-79
 

 
The WOOCS WordPress plugin before 1.3.7.1 does not sanitise and escape the key parameter of the woocs_update_profiles_data AJAX action (available to any authenticated user) before outputting it back in the response, leading to a Reflected cross-Site Scripting issue

 

 >>> Vendor: Woocommerce 11 Products
Woocommerce
Paypal checkout payment gateway
Payu india payment gateway
Persian woocommerce sms
Subscriptions
Nab transact
Gift cards
Help scout
Upload files
Woocommerce currency switcher
Persian-woocommerce


Copyright 2024, cxsecurity.com

 

Back to Top