Unrated

Dokan < 3.6.4 - Vendor Stored Cross-Site Scripting

CVE-2022-3194 First seen on SecPulse Jan 17, 2024

Original description The description as published by the source.

The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allow them to run stored XSS attacks against other users like site administrators.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Key facts

Severity: Unrated
Published: Jan 17, 2024
First seen on SecPulse: Jan 17, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:56