Security Advisory
CVE-2019-18834
6.1
MEDIUM
Vulnerability Description
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Details are mishandled in WCS_Admin_Post_Types in class-wcs-admin-post-types.php.
Published Date
July 23, 2020
Official Source
NIST NVD Advisory