← CVE Intelligence

CVE-2022-1673

WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout page PUBLISHED

Description (CNA)

The WooCommerce Green Wallet Gateway WordPress plugin before 1.0.2 does not escape the error_envision query parameter before outputting it to the page, leading to a Reflected Cross-Site Scripting vulnerability.

Affected (CNA)

Vendor / productVersions
Unknown / WooCommerce Green Wallet Gatewayaffected 1.0.2 before 1.0.2

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.