medium6.1
CVE-2019-18834
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Detai…
Impact
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Details are mishandled in WCS_Admin_Post_Types in class-wcs-admin-post-types.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Woocommerce | Subscriptions | before 2.6.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://woocommerce.com/products/woocommerce-subscriptions/
- https://www.precursorsecurity.com/blog
- https://www.precursorsecurity.com/blog/woocommerce-subscriptions-persistent-xss-cve-2019-18834
- https://woocommerce.com/products/woocommerce-subscriptions/
- https://www.precursorsecurity.com/blog
- https://www.precursorsecurity.com/blog/woocommerce-subscriptions-persistent-xss-cve-2019-18834