RSS   Vulnerabilities for 'Advance search for woocommerce'   RSS

2018-06-01
 
CVE-2018-11486

CWE-79
 

 
An issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier for WordPress. This plugin is vulnerable to a stored Cross-site scripting (XSS) vulnerability. A non-authenticated user can save the plugin settings and inject malicious JavaScript code in the Custom CSS textarea field, which will be loaded on every site page.

 

 >>> Vendor: Multidots 6 Products
Woo checkout for digital goods
Add social share messenger buttons whatsapp and viber
Woocommerce quick reports
Advance search for woocommerce
Woocommerce category banner management
Mass pages/posts creator


Copyright 2018, cxsecurity.com

 

Back to Top