未評価
WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
CVE-2022-2099
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report wpscan.com
- web wordpress.org