6.5
Medium
CVE-2023-49828 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo allows Stored XSS.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 6.4.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WooPayments – Fully Integrated Solution Built and Supported by Woo 6.4 | earliest → 6.4.2 | No fix stated |
Other CVEs of WooPayments – Fully Integrated Solution Built and Supported by Woo
The 4 CVEs of WooPayments – Fully Integrated Solution Built and Supported by Woo →
CVE-2023-51503
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
5.9
Medium
CVE-2023-35915
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic…
7.6
High
CVE-2023-35916
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
7.5
High