Non notée
CVE-2022-2090 The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back…
Description
The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Discount Rules for WooCommerce 2.4 | premières → < 2.4.2 | 2.4.2 |