CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization checks on the updateSettingsAction() function which is called via an admin_init hook, along with missing sanitization and escaping on the settings that are stored.
Explanation of Vulnerability in Simple Terms
The Flexible Checkout Fields for WooCommerce plugin contains a cross-site scripting (XSS) vulnerability in versions before 2.3.2. An attacker can inject malicious scripts that execute in the browsers of site visitors and administrators. The vulnerability affects the checkout form and can be exploited without authentication. Update to version 2.3.2 or later to fix this issue.
What an attacker can do
Inject malicious scripts that run in visitors' browsers, stealing session tokens, form data, or redirecting users.
Potential impact on your site
Visitors and admins may have their sessions hijacked, credentials stolen, or be redirected to malicious sites.
Conditions required to exploit
No authentication required. The attacker can exploit this remotely by crafting a malicious request or link.
Key dates
External resources
Related vulnerabilities
