Skip to content
Sign in
Not rated

CVE-2022-2099 The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and…

Description

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles

Affected products and versions

Product Affected versions Fixed in
WooCommerce 6.6 earliest → < 6.6.0 6.6.0

Other CVEs of WooCommerce

The 3 CVEs of WooCommerce →
CVE-2024-1310 The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking… 4.9 Medium CVE-2022-0775 The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which… 4.3 Medium
Track this CVE