CVE-2022-0989
NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality
highImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
7.5
CVSS Score
7.5
CVSS Score
high
Severity
3.0.0
Patched in
809d
Time to patch
Description
An unprivileged user could use the functionality of the NS WooCommerce Watermark WordPress plugin through 2.11.3 to load images that hide malware for example from passing malicious domains to hide their trace, by making them pass through the vulnerable domain.
CVSS Vector Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NAttack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
None
Confidentiality
High
Integrity
None
Availability
Technical Details
Affected versions
<=2.11.3PublishedMarch 15, 2022
Last updatedMay 31, 2024
Affected pluginns-woocommerce-watermark
Check if your site is affected.
Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.