WordPress Plugin Vulnerabilities
Advanced Order Export For WooCommerce < 3.1.4 - Authenticated Cross-Site Scripting (XSS)
Description
The Advanced Order Export plugin for WooCommerce versions < 3.1.4 had a reflected XSS vulnerability due to lack of input sanitization on the woe_post_type parameter. This allowed arbitrary HTML and JavaScript injection and execution in the context of the logged in user.
Proof of Concept
On a WooCommerce installation with a vulnerable Advanced Order Export plugin (< 3.1.4), issue the following request while logged in as Administrator: https://example.com/wp-admin/admin.php?page=wc-order-export&tab=export&woe_post_type=%22%3E%3Cscript%3Ealert(1);#segment=common
Affects Plugins
Fixed in version 3.1.4
References
Classification
Miscellaneous
Original Researcher
Jack Misiura
Submitter
Jack Misiura
Submitter website
Verified
No
Timeline
Publicly Published
2020-05-04 (about 2 years ago)
Added
2020-05-04 (about 2 years ago)
Last Updated
2020-05-05 (about 2 years ago)