6.5
Moyenne
CVE-2023-49828 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo allows Stored XSS.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 6.4.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WooPayments – Fully Integrated Solution Built and Supported by Woo 6.4 | premières → 6.4.2 | Pas de correctif indiqué |
Autres CVE de WooPayments – Fully Integrated Solution Built and Supported by Woo
Les 4 CVE de WooPayments – Fully Integrated Solution Built and Supported by Woo →
CVE-2023-51503
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
5.9
Moyenne
CVE-2023-35915
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic…
7.6
Élevée
CVE-2023-35916
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
7.5
Élevée