ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks, 017045168c64e0e4ed8e001360b529fe2937085e
- CVE, Research URL
- Home page URL
-
Security reports for ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks
- Published on
- May 22, 2022
- Research Description
- ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks [product-blocks] < 3.0.0 ProductX – Gutenberg WooCommerce Blocks – WooCommerce Builder, Wishlist for WooCommerce, Products Comparison, Quick View, Online Store – All in One Solution <= 2.2.5 - Multiple Cross-Site Scripting ProductX – Gutenberg WooCommerce Blocks – WooCommerce Builder, Wishlist for WooCommerce, Products Comparison, Quick View, Online Store – All in One Solution in versions up to and including 2.2.5 is vulnerable to Cross-Site Scripting due to insufficient sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Affected versions
-
Min -, max 3.0.0.
- Status
-
vulnerable