The plugin does not sanitize and escape Product Code when creating Product Shortcode, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
When creating a "New product shortcode" you can inject XSS payloads like <--`<img/src=` onerror=confirm``> --!> in the Product Code form field. When a page that includes that product's shortcode is viewed by a visitor, the payload will execute.
Asif Nawaz Minhas
Asif Nawaz Minhas
Yes
2021-10-05 (about 8 months ago)
2021-10-05 (about 8 months ago)
2022-04-09 (about 2 months ago)