TI-2021-15956 CVE-2021-38349 · GHSA-243w-cr2g-7p8mIntegration of Moneybird for WooCommerce <= 2.1.1 Reflected Cross-Site ScriptingPriority LOW 29The Integration of Moneybird for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the error_description parameter found in the ~/templates/wcmb-admin.php file which allows attackers to inj…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00895 · Published 2021-09-10 · No fix listed CWE-79