medium6.1
CVE-2021-24940
The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which …
Impact
The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which could lead to a Reflected Cross-Site Scripting issue
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Woocommerce | Persian-Woocommerce | through 5.8.0 |