CVEs-PoC/2019/CVE-2019-14948.md

CVE-2019-14948

Description

The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.

POC

Reference

• https://wpvulndb.com/vulnerabilities/9502
• https://www.pluginvulnerabilities.com/2019/08/08/this-authenticated-persistent-xss-vulnerability-might-be-what-hackers-are-targeting-ppom-for-woocommerce-for/

Github

• https://github.com/20142995/nuclei-templates