Skip to main content

Woocommerce Sagepay Direct Payment Gateway

1 CVEs product

Monthly

CVE-2014-4549 Jul 02, 20:55 MEDIUM POC PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

PHP WordPress XSS Wordpress Plugin Woocommerce Sagepay Direct Payment Gateway
NVD GitHub
CVSS 2.0
4.3
EPSS
0.2%
EPSS 0% CVSS 4.3
MEDIUM POC PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

PHP WordPress XSS +2
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy