Back to search
CVE-2022-0818
Published: Mar 28, 2022
Modified: Aug 2, 2024
PUBLISHED
Description
The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin.
| Vendor | Product | Versions |
|---|---|---|
Unknown | WooCommerce Affiliate Plugin – Coupon Affiliates | affected 4.16.4.5 - < 4.16.4.5 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now