Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-2099

WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WooCommerce

Default version status: unaffected

  • 0 to < 6.6.0affected

References