Description
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Details are mishandled in WCS_Admin_Post_Types in class-wcs-admin-post-types.php.
Unscored
CVE-2019-18834
EUVD-2019-8536GHSA-h2jc-jq9c-94x8
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript b…
Published Jul 23, 2020 · Updated Aug 5, 2024 · Assigned by mitre