CVE-2020-37174
MEDIUMWOOF Products Filter for WooCommerce 1.2.3 Persistent XSS
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37174. PoCs published by Shahab.ra.9.
AI-analyzed exploit summary This exploit demonstrates a persistent XSS vulnerability in the WOOF Products Filter for WooCommerce plugin (version 1.2.3). The attacker injects malicious JavaScript into the plugin's design settings, which executes when the page is refreshed or viewed on the frontend.
Description
WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS payloads in design tab textfields. Attackers can inject JavaScript code through fields like 'Text for block toggle' and 'Custom front css styles' that executes on frontend pages when saved, affecting all site visitors.
Exploits (1)
This exploit demonstrates a persistent XSS vulnerability in the WOOF Products Filter for WooCommerce plugin (version 1.2.3). The attacker injects malicious JavaScript into the plugin's design settings, which executes when the page is refreshed or viewed on the frontend.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N