Trusted Shops Easy Integration For Woocommerce
Monthly
Cross-site scripting in the Trusted Shops Easy Integration for WooCommerce plugin through version 2.0.6 allows unauthenticated attackers to deliver crafted input that executes as script in a victim's browser session once that victim is induced to follow a malicious link or request (UI:R, PR:N). Impact is bounded to Low for confidentiality, integrity and availability while the vulnerable component's scope is changed (S:C), producing a 7.1 CVSS base score, and no public exploit code or confirmed active exploitation was identified at time of analysis. Because successful attacks depend on social engineering a store visitor or authenticated administrator, this is a moderate-risk issue rather than an urgent priority; the site must have the plugin installed and active.
Cross-site scripting in the Trusted Shops Easy Integration for WooCommerce plugin through version 2.0.6 allows unauthenticated attackers to deliver crafted input that executes as script in a victim's browser session once that victim is induced to follow a malicious link or request (UI:R, PR:N). Impact is bounded to Low for confidentiality, integrity and availability while the vulnerable component's scope is changed (S:C), producing a 7.1 CVSS base score, and no public exploit code or confirmed active exploitation was identified at time of analysis. Because successful attacks depend on social engineering a store visitor or authenticated administrator, this is a moderate-risk issue rather than an urgent priority; the site must have the plugin installed and active.