Non évaluée
WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
CVE-2022-2099
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- report wpscan.com
- web wordpress.org