CVE-2019-14948

Impact

The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://wordpress.org/plugins/woocommerce-product-addon/#developers
• https://wpvulndb.com/vulnerabilities/9502
• https://www.pluginvulnerabilities.com/2019/08/08/this-authenticated-persistent-xss-vulnerability-might-be-what-hackers-are-targeting-ppom-for-woocommerce-for/
• https://wordpress.org/plugins/woocommerce-product-addon/#developers
• https://wpvulndb.com/vulnerabilities/9502
• https://www.pluginvulnerabilities.com/2019/08/08/this-authenticated-persistent-xss-vulnerability-might-be-what-hackers-are-targeting-ppom-for-woocommerce-for/