CVE-2019-14948 - The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure

MEDIUM

The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure

Published Aug 12, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 1.04%

The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://wordpress.org/plugins/woocommerce-product-addon/#developers		x_refsource_MISCRelease Notes
https://wpvulndb.com/vulnerabilities/9502		x_refsource_MISCThird Party Advisory
https://www.pluginvulnerabilities.com/2019/08/08/this-authenticated-persistent-xss-vulnerability-might-be-what-hackers-are-targeting-ppom-for-woocommerce-for/		x_refsource_MISCExploitThird Party Advisory