← Back to CVE List

CVE-2019-18834

Published: 2020-07-23T20:15Z
Last Modified: 2024-11-21T04:33Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Details are mishandled in WCS_Admin_Post_Types in class-wcs-admin-post-types.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt