Vulnerabilities and Security Researches

WooCommerce, CVE-2015-2329

CVE, Research URL: CVE-2015-2329
Home page URL: Security reports for WooCommerce
Application: WooCommerce
Published on: Feb 09, 2018
Research Description: Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted order.
Affected versions: Min 2.3, max 2.3.5.
Status: vulnerable