CVE-2022-2099

CVE-2022-2099: WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

Vendor Unknown
Product WooCommerce
Published July 17, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles

Key dates

02Disclosure timeline

July 17, 2022 CVE published
August 3, 2024 Record updated