Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in actpro Extra Product Options for WooCommerce plugin <= 3.0.3 versions.
References
Configurations
Configuration 1 (hide)
|
History
17 Nov 2023, 15:55
Type | Values Removed | Values Added |
---|---|---|
First Time |
Actpro extra Product Options For Woocommerce
Actpro |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
References | () https://patchstack.com/database/vulnerability/extra-product-options-for-woocommerce/wordpress-extra-product-options-for-woocommerce-plugin-3-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve - Third Party Advisory | |
CPE | cpe:2.3:a:actpro:extra_product_options_for_woocommerce:*:*:*:*:*:wordpress:*:* |
14 Nov 2023, 19:30
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-11-14 19:15
Updated : 2024-02-28 20:54
NVD link : CVE-2023-47658
Mitre link : CVE-2023-47658
CVE.ORG link : CVE-2023-47658
JSON object : View
Products Affected
actpro
- extra_product_options_for_woocommerce
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')