CVE-2021-24323
1 advisory.
Packagist/woocommerce/woocommerce CVE-2021-24323: medium 4.8
Woocommerce Cross-site Scripting via Additional tax classes field when taxes are enabled
Action: Upgrade woocommerce/woocommerce to 5.2.0 or later.
composer require woocommerce/woocommerce:5.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.0 | - |
Fixed versions
| 5.2.0 |
Sources
- osv: GHSA-mp46-7x6q-f28m
- https://nvd.nist.gov/vuln/detail/CVE-2021-24323
- https://github.com/woocommerce/woocommerce/commit/6ede8c5f59aec3ca70aa27d1ffd5a6574473f2ce
- https://github.com/woocommerce/woocommerce
- https://wpscan.com/vulnerability/6d262555-7ae4-4e36-add6-4baa34dc3010
CVE-2021-24323 · published · modified · JSON