Medium severity · published May 17, 2021
CVE-2021-24323
When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users…
4.8
CVSS
0.7%
EPSS
No
On KEV
Description
When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfiltered_html is disabled
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Woocommerce · Woocommerce
before 5.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-24323
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-24323
Exploit
https://wpscan.com/vulnerability/6d262555-7ae4-4e36-add6-4baa34dc3010
More from Woocommerce
9.8
CVE-2022-50972
WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php
8.8
CVE-2023-52222
WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
CVE-2019-20891
WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with resultant stored cross-site scripting (XSS) via…
8.8
CVE-2017-18356
In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the target site with a user account that has at least Shop manager…
8.1
CVE-2018-20714
The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vulnerability