1.0.96

CVSS 4.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

piwebsolution

NVD

Published: 2023-06-26

Updated: 2024-11-21

Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PI Websolution Conditional cart fee plugin <= 1.0.96 versions.

Vulnerable Configurations

Part	Description	Count
Application	Piwebsolution Piwebsolution Conditional Cart FEE / Extra Charge Rule FOR Woocommerce Extra Fees - Piwebsolution Conditional Cart FEE / Extra Charge Rule FOR Woocommerce Extra Fees 1.0.93 Piwebsolution Conditional Cart FEE / Extra Charge Rule FOR Woocommerce Extra Fees 1.0.96	3

References

https://patchstack.com/database/vulnerability/conditional-extra-fees-for-woocommerce/wordpress-conditional-extra-fees-for-woocommerce-plugin-1-0-96-cross-site-scripting-xss-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/conditional-extra-fees-for-woocommerce/wordpress-conditional-extra-fees-for-woocommerce-plugin-1-0-96-cross-site-scripting-xss-vulnerability?_s_id=cve