5.9Medium

CVE-2023-34170WordPress Quick/Bulk Order Form for WooCommerce Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

WP Overnight Quick/Bulk Order Form for WooCommerce Published: (3 years ago)

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin <= 3.5.7 versions.

Weakness (CWE): CWE-79

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
WP Overnight Quick/Bulk Order Form for WooCommerce ≤ 3.5.7

References and patches