CVE-2014-4558

MEDIUM NUCLEI

Swipe Checkout for WooCommerce <2.7.1 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.

Nuclei Templates (1)

WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting

MEDIUMby daffainfo

References (1)

[Exploit, Third Party Advisory] http://codevigilant.com/disclosure/wp-plugin-swipehq-payment-gateway-woocommerce-a3-cross-site-scripting-xss

Scores

CVSS v3 6.1

EPSS 0.0441

EPSS Percentile 89.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

cybercompany/swipehq-payment-gateway-woocommerce < 2.7.1

Published Dec 27, 2019

Tracked Since Feb 18, 2026