CVE-2021-24169

Опубликовано: 05 апр. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS.

Ссылки

http://packetstormsecurity.com/files/164263/WordPress-Advanced-Order-Export-For-WooCommerce-3.1.7-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://wpscan.com/vulnerability/09681a6c-57b8-4448-982a-fe8d28c87fc3
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/164263/WordPress-Advanced-Order-Export-For-WooCommerce-3.1.7-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://wpscan.com/vulnerability/09681a6c-57b8-4448-982a-fe8d28c87fc3
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:algolplus:advanced_order_export_for_woocommerce:*:*:*:*:*:wordpress:*:*

Версия до 3.1.8 (исключая)

EPSS

Процентиль: 90%

0.05053

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-w2gv-7447-6h8c