CVE-2022-2099

Publication date

2022-07-17 10:35:52

Family

WPScan

State

PUBLISHED

Description

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles