Unrated
WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
CVE-2022-2099
First seen on SecPulse
Original description The description as published by the source.
The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- report wpscan.com
- web wordpress.org