Unrated severityNVD Advisory· Published Jul 17, 2022· Updated Aug 3, 2024
Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting
CVE-2022-2090
Description
The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting
Affected products
1- Range: 2.4.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/0201f365-7acb-4640-bd3f-7119432f4917mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.