Description (CNA)
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Details are mishandled in WCS_Admin_Post_Types in class-wcs-admin-post-types.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.precursorsecurity.com/blog
- https://woocommerce.com/products/woocommerce-subscriptions/
- https://www.precursorsecurity.com/blog/woocommerce-subscriptions-persistent-xss-cve-2019-18834
ADP enrichment
No English description supplied.