medium5.4
CVE-2019-15778
The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS.
Impact
The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getwooplugins | Additional Variation Images For Woocommerce | before 1.1.29 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wordpress.org/plugins/woo-variation-gallery/#developers
- https://wpvulndb.com/vulnerabilities/9852
- https://www.pluginvulnerabilities.com/2019/08/20/vulnerablity-details-authenticated-persistent-cross-site-scripting-xss-in-additional-variation-images-for-woocommerce/
- https://wordpress.org/plugins/woo-variation-gallery/#developers
- https://wpvulndb.com/vulnerabilities/9852
- https://www.pluginvulnerabilities.com/2019/08/20/vulnerablity-details-authenticated-persistent-cross-site-scripting-xss-in-additional-variation-images-for-woocommerce/