← Database

CVE-2022-2099

MEDIUM CVSS: 4.8 Published: 2022-07-17 Modified: 2026-06-17

Description

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles

Affected Platforms

Woocommerce Woocommerce

Weakness Type

CWE-116

References