Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 XSS in metabox customer note field
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 XSS in metabox customer note field


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: portal.patchman.co

Some variables in the customer note field are not properly escaped to prevent an XSS attack.

This vulnerability affects the following application versions:

  • WooCommerce 3.3.0
  • WooCommerce 3.3.0-rc.1
  • WooCommerce 3.3.0-rc.2
  • WooCommerce 3.3.1
  • WooCommerce 3.3.1-rc.1
  • WooCommerce 3.3.2
  • WooCommerce 3.3.2-rc.1
  • WooCommerce 3.3.3
  • WooCommerce 3.3.4
  • WooCommerce 3.3.5
  • WooCommerce 3.3.6
  • WooCommerce 3.4.0
  • WooCommerce 3.4.0-beta.1
  • WooCommerce 3.4.0-rc.1
  • WooCommerce 3.4.0-rc.2
  • WooCommerce 3.4.1
  • WooCommerce 3.4.2
  • WooCommerce 3.4.3
  • WooCommerce 3.4.4
  • WooCommerce 3.4.5
  • WooCommerce 3.4.6
  • WooCommerce 3.4.7
  • WooCommerce 3.4.8
  • WooCommerce 3.5.0
  • WooCommerce 3.5.0-beta.1
  • WooCommerce 3.5.0-rc.1
  • WooCommerce 3.5.0-rc.2
  • WooCommerce 3.5.1
  • WooCommerce 3.5.2
  • WooCommerce 3.5.3
  • WooCommerce 3.5.4
  • WooCommerce 3.5.5
  • WooCommerce 3.5.6
  • WooCommerce 3.5.7
  • WooCommerce 3.5.8
  • WooCommerce 3.5.9
  • WooCommerce 3.5.10
  • WooCommerce 3.6.0
  • WooCommerce 3.6.0-beta.1
  • WooCommerce 3.6.0-rc.1
  • WooCommerce 3.6.0-rc.2
  • WooCommerce 3.6.0-rc.3
  • WooCommerce 3.6.1
  • WooCommerce 3.6.2
  • WooCommerce 3.6.3
  • WooCommerce 3.6.4
  • WooCommerce 3.6.5
  • WooCommerce 3.6.6
  • WooCommerce 3.6.7
  • WooCommerce 3.7.0
  • WooCommerce 3.7.0-beta.1
  • WooCommerce 3.7.0-rc.1
  • WooCommerce 3.7.0-rc.2
  • WooCommerce 3.7.1
  • WooCommerce 3.7.2
  • WooCommerce 3.7.3
  • WooCommerce 3.8.0
  • WooCommerce 3.8.0-beta.1
  • WooCommerce 3.8.0-rc.1
  • WooCommerce 3.8.0-rc.2
  • WooCommerce 3.8.1
  • WooCommerce 3.8.2
  • WooCommerce 3.8.3
  • WooCommerce 3.9.0
  • WooCommerce 3.9.0-beta.1
  • WooCommerce 3.9.0-beta.2
  • WooCommerce 3.9.0-rc.1
  • WooCommerce 3.9.0-rc.2
  • WooCommerce 3.9.0-rc.3
  • WooCommerce 3.9.0-rc.4
  • WooCommerce 3.9.1
  • WooCommerce 3.9.2
  • WooCommerce 3.9.3
  • WooCommerce 3.9.4
  • WooCommerce 3.9.5
  • WooCommerce 4.0.0
  • WooCommerce 4.0.0-beta.1
  • WooCommerce 4.0.0-rc.1
  • WooCommerce 4.0.0-rc.2
  • WooCommerce 4.0.1
  • WooCommerce 4.0.2
  • WooCommerce 4.0.3
  • WooCommerce 4.0.4
  • WooCommerce 4.1.0
  • WooCommerce 4.1.0-beta.1
  • WooCommerce 4.1.0-beta.2
  • WooCommerce 4.1.0-rc.1
  • WooCommerce 4.1.0-rc.2
  • WooCommerce 4.1.0-rc.3
  • WooCommerce 4.1.1
  • WooCommerce 4.1.2
  • WooCommerce 4.1.2.1
  • WooCommerce 4.1.3
  • WooCommerce 4.1.4
  • WooCommerce 4.2.0
  • WooCommerce 4.2.0-beta.1
  • WooCommerce 4.2.0-RC.1
  • WooCommerce 4.2.0-RC.2
  • WooCommerce 4.2.1
  • WooCommerce 4.2.2
  • WooCommerce 4.2.3
  • WooCommerce 4.2.3.1
  • WooCommerce 4.2.4
  • WooCommerce 4.2.5
  • WooCommerce 4.3.0
  • WooCommerce 4.3.0-beta.1
  • WooCommerce 4.3.0-rc.1
  • WooCommerce 4.3.0-rc.2
  • WooCommerce 4.3.0-rc.3
  • WooCommerce 4.3.1
  • WooCommerce 4.3.2
  • WooCommerce 4.3.3
  • WooCommerce 4.3.4
  • WooCommerce 4.3.4.1
  • WooCommerce 4.3.5
  • WooCommerce 4.3.6
  • WooCommerce 4.4.0
  • WooCommerce 4.4.0-beta.1
  • WooCommerce 4.4.0-rc.1
  • WooCommerce 4.4.1
  • WooCommerce 4.4.2
  • WooCommerce 4.4.2.1
  • WooCommerce 4.4.3
  • WooCommerce 4.4.4
  • WooCommerce 4.5.0
  • WooCommerce 4.5.0-beta.1
  • WooCommerce 4.5.0-rc.1
  • WooCommerce 4.5.0-rc.2
  • WooCommerce 4.5.0-rc.3
  • WooCommerce 4.5.1
  • WooCommerce 4.5.2
  • WooCommerce 4.5.3
  • WooCommerce 4.5.3.1
  • WooCommerce 4.5.4
  • WooCommerce 4.5.5
  • WooCommerce 4.6.0
  • WooCommerce 4.6.0-beta.1
  • WooCommerce 4.6.0-rc.1
  • WooCommerce 4.6.1
  • WooCommerce 4.6.2
  • WooCommerce 4.6.3
  • WooCommerce 4.6.3.1
  • WooCommerce 4.6.4
  • WooCommerce 4.6.5
  • WooCommerce 4.7.0
  • WooCommerce 4.7.0-beta.1
  • WooCommerce 4.7.0-beta.2
  • WooCommerce 4.7.0-rc.1
  • WooCommerce 4.7.1
  • WooCommerce 4.7.1-beta.1
  • WooCommerce 4.7.2
  • WooCommerce 4.7.3
  • WooCommerce 4.7.4
  • WooCommerce 4.8.0
  • WooCommerce 4.8.0-beta.1
  • WooCommerce 4.8.0-rc.1
  • WooCommerce 4.8.0-rc.2
  • WooCommerce 4.8.1
  • WooCommerce 4.8.2
  • WooCommerce 4.8.3
  • WooCommerce 4.9.0
  • WooCommerce 4.9.0-beta.1
  • WooCommerce 4.9.0-rc.1
  • WooCommerce 4.9.0-rc.2
  • WooCommerce 4.9.1
  • WooCommerce 4.9.2
  • WooCommerce 4.9.3
  • WooCommerce 4.9.4
  • WooCommerce 4.9.5
  • WooCommerce 5.0.0
  • WooCommerce 5.0.0-beta.1
  • WooCommerce 5.0.0-beta.2
  • WooCommerce 5.0.0-rc.1
  • WooCommerce 5.0.0-rc.2
  • WooCommerce 5.0.0-rc.3
  • WooCommerce 5.0.1
  • WooCommerce 5.0.2
  • WooCommerce 5.0.3
  • WooCommerce 5.1.0
  • WooCommerce 5.1.0-beta.1
  • WooCommerce 5.1.0-rc.1
  • WooCommerce 5.1.1
  • WooCommerce 5.1.2
  • WooCommerce 5.1.3
  • WooCommerce 5.2.0
  • WooCommerce 5.2.0-beta.1
  • WooCommerce 5.2.0-rc.1
  • WooCommerce 5.2.0-rc.2
  • WooCommerce 5.2.1
  • WooCommerce 5.2.2
  • WooCommerce 5.2.3
  • WooCommerce 5.2.4
  • WooCommerce 5.2.5
  • WooCommerce 5.3.0
  • WooCommerce 5.3.0-beta.1
  • WooCommerce 5.3.0-rc.1
  • WooCommerce 5.3.0-rc.2
  • WooCommerce 5.3.1
  • WooCommerce 5.3.2
  • WooCommerce 5.3.3
  • WooCommerce 5.4.0
  • WooCommerce 5.4.0-beta.1
  • WooCommerce 5.4.0-rc.1
  • WooCommerce 5.4.1
  • WooCommerce 5.4.2
  • WooCommerce 5.4.3
  • WooCommerce 5.4.4
  • WooCommerce 5.5.0
  • WooCommerce 5.5.0-beta.1
  • WooCommerce 5.5.0-rc.1
  • WooCommerce 5.5.0-rc.2
  • WooCommerce 5.5.1
  • WooCommerce 5.5.2
  • WooCommerce 5.5.3
  • WooCommerce 5.5.4
  • WooCommerce 5.6.0
  • WooCommerce 5.6.0-beta.1
  • WooCommerce 5.6.0-rc.1
  • WooCommerce 5.6.0-rc.2
  • WooCommerce 5.6.1
  • WooCommerce 5.6.2
  • WooCommerce 5.7.0
  • WooCommerce 5.7.0-beta.1
  • WooCommerce 5.7.0-rc.1
  • WooCommerce 5.7.0-rc.2
  • WooCommerce 5.7.1
  • WooCommerce 5.7.2
  • WooCommerce 5.8.0
  • WooCommerce 5.8.0-beta.1
  • WooCommerce 5.8.0-beta.2
  • WooCommerce 5.8.0-rc.1
  • WooCommerce 5.8.1
  • WooCommerce 5.9.0
  • WooCommerce 5.9.0-beta.1
  • WooCommerce 5.9.0-rc.1
  • WooCommerce 5.9.0-RC.1
  • WooCommerce 5.9.0-rc.2
  • WooCommerce 5.9.1
  • WooCommerce 6.0.0
  • WooCommerce 6.0.0-beta.1
  • WooCommerce 6.0.0-rc.1
  • WooCommerce 6.0.1
  • WooCommerce 6.1.0
  • WooCommerce 6.1.0-beta.1
  • WooCommerce 6.1.0-rc.1
  • WooCommerce 6.1.0-rc.2
  • WooCommerce 6.1.1
  • WooCommerce 6.1.2
  • WooCommerce 6.2.0
  • WooCommerce 6.2.0-beta.1
  • WooCommerce 6.2.0-rc.1
  • WooCommerce 6.2.0-rc.2
  • WooCommerce 6.2.1
  • WooCommerce 6.2.2
  • WooCommerce 6.3.0
  • WooCommerce 6.3.0-beta.1
  • WooCommerce 6.3.0-rc.1
  • WooCommerce 6.3.0-rc.2
  • WooCommerce 6.3.1
  • WooCommerce 6.4.0
  • WooCommerce 6.4.0-beta.1
  • WooCommerce 6.4.0-rc.1
  • WooCommerce 6.4.1
  • WooCommerce 6.5.0
  • WooCommerce 6.5.0-beta.1
  • WooCommerce 6.5.0-rc.1
  • WooCommerce 6.5.0-rc.2
  • WooCommerce 6.5.1
  • WooCommerce 6.6.0
  • WooCommerce 6.6.0-beta.1
  • WooCommerce 6.6.0-rc.1
  • WooCommerce 6.6.0-rc.2
  • WooCommerce 6.6.1
  • WooCommerce 6.7.0
  • WooCommerce 6.7.0-beta.1
  • WooCommerce 6.7.0-beta.2
  • WooCommerce 6.7.0-rc.1
  • WooCommerce 6.8.0
  • WooCommerce 6.8.0-beta.1
  • WooCommerce 6.8.0-beta.2
  • WooCommerce 6.8.0-rc.1
  • WooCommerce 6.8.1
  • WooCommerce 6.8.2
  • WooCommerce 6.9.0
  • WooCommerce 6.9.0-beta.1
  • WooCommerce 6.9.0-beta.2
  • WooCommerce 6.9.0-rc.1
  • WooCommerce 6.9.1
  • WooCommerce 6.9.2
  • WooCommerce 6.9.3
  • WooCommerce 6.9.4
  • WooCommerce 7.0.0
  • WooCommerce 7.0.0-beta.1
  • WooCommerce 7.0.0-beta.2
  • WooCommerce 7.0.0-beta.3
  • WooCommerce 7.0.0-rc.1
  • WooCommerce 7.0.0-rc.2
  • WooCommerce 7.0.1
  • WooCommerce 7.1.0-beta.1
  • WooCommerce 7.1.0-beta.2
  • WooCommerce 7.1.0-rc.1
  • WooCommerce list
  • WooCommerce nightly
...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 XSS in metabox customer note field


📈 63.11 Punkte

📌 Added escaping to metabox text field to prevent XSS


📈 47.77 Punkte

📌 Escaping collapsible metabox section to prevent XSS


📈 35.42 Punkte

📌 XSS in Metabox


📈 35.42 Punkte

📌 XSS-LOADER - XSS Payload Generator / XSS Scanner / XSS Dork Finder


📈 29.8 Punkte

📌 Medium CVE-2019-14794: Metabox Meta box


📈 27.97 Punkte

📌 Medium CVE-2019-14793: Metabox Meta box


📈 27.97 Punkte

📌 CVE-2023-41876 | Hardik Kalathiya WP Gallery Metabox Plugin up to 1.0.0 on WordPress cross-site request forgery


📈 27.97 Punkte

📌 Additional escaping for general metabox functions


📈 27.97 Punkte

📌 CVE-2023-46191 | Niels van Renselaar Open Graph Metabox Plugin up to 1.4.4 on WordPress cross-site request forgery


📈 27.97 Punkte

📌 Xiaomi-Redmi-Vergleich: Note 10, Note 10 Pro, Note 10S, Note 10 5G


📈 26.7 Punkte

📌 Xiaomi stellt die Redmi Note 10, Note 10 5G, Note 10S und Note 10 Pro vor


📈 26.7 Punkte

📌 Build a Unified Customer Profile with Customer Insights in Dynamics 365 | Customer Data Platform


📈 26 Punkte

📌 Build a Unified Customer Profile with Customer Insights in Dynamics 365 | Customer Data Platform


📈 26 Punkte

📌 HackerOne: Custom Field Attributes may be created and updated for customers with Custom Field Trial enabled


📈 24.69 Punkte

📌 Are there any computer security professionals that I can communicate with regarding questions about the field and transferring out of my current field?


📈 24.69 Punkte

📌 Low CVE-2020-16252: Field test project Field test


📈 24.69 Punkte

📌 Common Sources of Software Risk in Field Service Companies and How Field Service Software Help Minimize Them


📈 24.69 Punkte

📌 AgStack Launches a Global Scientific Collaboration on a Digital Open Source Field-carbon Model for In-field Carbon Accounting in Agriculture


📈 24.69 Punkte

📌 AI improves field service quality and customer experience


📈 21.01 Punkte

📌 Customer service, especially field service, helps companies outperform competitors and drive growth


📈 21.01 Punkte

📌 TechStage | Unterschiede: Xiaomi Redmi Note 9 vs Note 9S vs Note 9 Pro


📈 20.03 Punkte

📌 Xiaomi Redmi Note 10 Pro Max neben Note 10 und Note 10 Pro am 4. März?


📈 20.03 Punkte

📌 Xiaomi Redmi Note 13 vs. Note 13 Pro vs. Note 13 Pro+: So unterscheiden sich die neuen Smartphones


📈 20.03 Punkte

📌 Galaxy Note 10 (+) vs. Note 9 vs. Note 8: Der große Generationen-Vergleich


📈 20.03 Punkte

📌 WordPress Advanced Custom Fields: Table Field 1.1.12 XSS


📈 19.79 Punkte

📌 WordPress Advanced Custom Fields: Table Field 1.1.12 XSS


📈 19.79 Punkte

📌 [20190303] - Core - XSS in media form field


📈 19.79 Punkte

📌 Custom Field Suite <= 2.5.14 - Authenticated Cross-Site Scripting (XSS)


📈 19.79 Punkte

📌 LearnDash < 3.1.2 - Reflected Cross Site Scripting (XSS) issue on the [ld_profile] search field.


📈 19.79 Punkte

📌 [webapps] Alumni Management System 1.0 - "Last Name field in Registration page" Stored XSS


📈 19.79 Punkte

📌 [webapps] WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 - "Dashboard Redirect" field Stored Cross-Site Scripting (XSS)


📈 19.79 Punkte

📌 [20190602] - Core - XSS in subform field


📈 19.79 Punkte

📌 [20190303] XSS in media form field


📈 19.79 Punkte

📌 [APPSEC-1885] Stored XSS in Product Name field


📈 19.79 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software