Woocommerce Products Price Bulk Edit <= 2.0 - Cross-Site Scripting via show_products_page_limit parameter
mediumThe Woocommerce Products Price Bulk Edit plugin for WordPress is vulnerable to Cross-Site Scripting via the wp-admin/admin-ajax.php?action=update_options show_products_page_limit parameter in versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for attack...
- CVSS:
- 5.4
- Affected:
- up to 2.0
- Fix:
- No patched version reported
- Disclosed:
- May 17, 2019