Star Cloudprnt For Woocommerce Vulnerabilities

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in lawrenceowen, gcubero, acunnningham, fmahmood Star CloudPRNT for WooCommerce plugin <= 2.0.3 versions.

Affected:

up to 2.0.3

Fix:

No patched version reported

Disclosed:

Nov 16, 2023

CVE-2023-47514 on NVD →

The Star CloudPRNT for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'printersettings' parameter in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web sc...

CVSS:

6.1

Affected:

up to 2.0.3

Fixed in:

2.0.4

Disclosed:

Nov 13, 2023

CVE-2023-4603 on NVD →

[en] The Star CloudPRNT for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'printersettings' parameter in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

Affected:

up to 2.0.4

Fixed in:

2.0.4

Disclosed:

Nov 13, 2023

CVE-2023-4603 on NVD →

The Star CloudPRNT for WooCommerce plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a use...

CVSS:

6.1

Affected:

up to 2.0.3

Fix:

No patched version reported

Disclosed:

Nov 7, 2023

CVE-2023-47514 on NVD →