Music Player for WooCommerce, b719198356d5501c3dcda4f20ff90b5ca3497335

CVE, Research URL: b719198356d5501c3dcda4f20ff90b5ca3497335
Home page URL: Security reports for Music Player for WooCommerce
Application: Music Player for WooCommerce
Published on: Jun 30, 2022
Research Description: Music Player for WooCommerce [music-player-for-woocommerce] < 1.0.173 Music Player for WooCommerce <= 1.0.172 - Authenticated (Admin+) Stored Cross-Site Scripting The Music Player for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting several parameters in versions up to, and including, 1.0.172 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: Min -, max 1.0.173.
Status: vulnerable