CVE-2022-3420 — Official Integration for Billingo < 3.4.0 - ShopManager+ Stored XSS

CVE-2022-3420

Official Integration for Billingo < 3.4.0 - ShopManager+ Stored XSS PUBLISHED

Description (CNA)

The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users with a role as low as Shop Manager to perform Stored Cross-Site Scripting attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / Official Integration for Billingo	affected 3.4.0 before 3.4.0

CWE

CWE-79

References

https://wpscan.com/vulnerability/ce5fac6e-8da1-4042-9cf8-7988613f92a5

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/ce5fac6e-8da1-4042-9cf8-7988613f92a5

CISA-ADP

No English description supplied.

No references supplied.