Aller au contenu
Non notée

CVE-2021-24679 The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET…

Description

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue

Produits et versions touchés

Produit Versions touchées Corrigé en
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop 1.6 premières → < 1.6.1 1.6.1
Les 2 CVE de Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop →
Suivre cette CVE