CVEvulnerability
CVE-2021-24169
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-04-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS.
Affected configurations
• algolplus advanced order export for woocommerce (< 3.1.8)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/164263/WordPress-Advanced-Order-Export-For-WooCommerce-3.1.7-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- https://wpscan.com/vulnerability/09681a6c-57b8-4448-982a-fe8d28c87fc3 Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/164263/WordPress-Advanced-Order-Export-For-WooCommerce-3.1.7-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- https://wpscan.com/vulnerability/09681a6c-57b8-4448-982a-fe8d28c87fc3 Exploit, Third Party Advisory