Skip to content
Threat Feed
Subscribe

Vendor

Customer Reviews for WooCommerce

2 briefs RSS
high advisory

Stored XSS in Customer Reviews for WooCommerce Plugin

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization of the Comment Author Name, allowing unauthenticated attackers to execute arbitrary scripts.

Customer Reviews for WooCommerce
1r 1t 1c
high advisory

Stored Cross-Site Scripting in Customer Reviews for WooCommerce

Unauthenticated attackers can perform Stored Cross-Site Scripting (XSS) via the 'cr_local_forms_submit' AJAX action in Customer Reviews for WooCommerce versions 5.106.0 and below.

Customer Reviews for WooCommerce
1r 2t 1c