WordPress Plugin Vulnerabilities

WooCommerce < 4.1.0 - Unescaped Metadata when Duplicating Products

Description

The WooCommerce changelog file was updated with the following message:

"Security – Fixed unescaped meta data while duplicating products. Reported by Slavco."

We will update this issue with further information as it becomes available.

Affects Plugins

Fixed in 4.1.0

References

Classification

Type
XSS
CWE
CVSS

Miscellaneous

Original Researcher
Slavco
Verified
No

Timeline

Publicly Published
2020-05-12 (about 5 years ago)
Added
2020-05-12 (about 5 years ago)
Last Updated
2020-05-12 (about 5 years ago)

Other