Woo Preview Emails Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digamber Pradhan Preview E-mails for WooCommerce allows Reflected XSS.This issue affects Preview E-mails for WooCommerce: from n/a through 2.2.1.

Affected:

up to 2.2.2

Fixed in:

2.2.2

Disclosed:

Mar 28, 2024

CVE-2024-27999 on NVD →

The Preview E-mails for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if t...

CVSS:

6.1

Affected:

up to 2.2.1

Fixed in:

2.2.2

Disclosed:

Mar 26, 2024

CVE-2024-27999 on NVD →

[en] The Preview E-Mails for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the search_order parameter found in the ~/views/form.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.6.8.

Affected:

up to 2.0.0

Fixed in:

2.0.0

Disclosed:

Nov 19, 2021

CVE-2021-42363 on NVD →

The Preview E-Mails for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the search_order parameter found in the ~/views/form.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.6.8.

CVSS:

6.1

Affected:

up to 1.6.8

Fixed in:

2.0.0

Disclosed:

Nov 18, 2021

CVE-2021-42363 on NVD →