Order Delivery Date for WooCommerce vulnerabilities
1 known vulnerability in Order Delivery Date for WooCommerce from Tychesoftwares. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest first
- 7.1 High severity
Order Delivery Date: Improper Neutralization of Input During Web Page Generation
The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin