Vulnerabilities and Security Researches

Product Addons & Fields for WooCommerce, CVE-2019-14948

CVE, Research URL: CVE-2019-14948
Home page URL: Security reports for Product Addons & Fields for WooCommerce
Application: Product Addons & Fields for WooCommerce
Published on: Aug 12, 2019
Research Description: The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.
Affected versions: max 2.0.
Status: vulnerable