Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: flycart Component: Discount Rules For Woocommerce Clear all filters
TI-2024-07918 CVE-2024-8541 · GHSA-mjqf-c8r8-gxjg

Cross-site scripting in flycart Discount Rules for WooCommerce

Priority LOW 28

The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00436 Published 2024-10-16 No fix listed CWE-79
TI-2022-01934 CVE-2022-2090 · GHSA-mc26-m43p-75hh

Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting

Priority LOW 29

The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2022-07-17 Fixed in 2.4.2 CWE-79