Description
Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING in the wc-reports page to wp-admin/admin.php.
Unscored
CVE-2015-2069
EUVD-2015-2180GHSA-vc98-g449-76h6
Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.11 for WordPress allows remote attackers to inject arbitrary …
Published Feb 24, 2015 · Updated Aug 6, 2024 · Assigned by mitre