Unknown WPC Smart Wishlist For Woocommerce vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown WPC Smart Wishlist For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2022-1465unknownwpc smart wishlist for woocommerce+2
EPSS score
0.86%
The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issue.6.1CVE-2022-0397unknownwpc smart wishlist for woocommerce+2
EPSS score
0.60%
The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_quickview AJAX action's response (available to any authenticated user), leading to a Reflected Cross-Site Scripting