nvd-json-data-feeds/CVE-2023/CVE-2023-04xx/CVE-2023-0479.json

{
  "id": "CVE-2023-0479",
  "sourceIdentifier": "contact@wpscan.com",
  "published": "2024-01-16T16:15:10.580",
  "lastModified": "2024-01-16T23:12:38.473",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/50963747-ae8e-42b4-bb42-cc848be7b92e/",
      "source": "contact@wpscan.com"
    }
  ]
}