CVE-2023-5325

Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS

The Woocommerce Vietnam Checkout WordPress plugin before 2.0.6 does not escape the custom shipping phone field no the checkout form leading to XSS

Affected

Woocommerce Vietnam Checkout

CVSS v3.1 NVD

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.47% chance of exploitation in the next 30 days, 39th percentile

Published

2023-11-27

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/e93841ef-e113-41d3-9fa1-b21af85bd812

References

• CVE Record
• NVD entry