Vulnerability Details CVE-2021-42367
The Variation Swatches for WooCommerce WordPress plugin is vulnerable to Stored Cross-Site Scripting via several parameters found in the ~/includes/class-menu-page.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.1.1. Due to missing authorization checks on the tawcvs_save_settings function, low-level authenticated users such as subscribers can exploit this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.8%
CVSS Severity
CVSS v3 Score 6.4
CVSS v2 Score 3.5
References
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2634227%40variation-swatches-for-woocommerce&new=2634227%40variation-swatches-for-woocommerce&sfp_email=&sfph_mail=
- https://www.wordfence.com/vulnerability-advisories/#CVE-2021-42367
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2634227%40variation-swatches-for-woocommerce&new=2634227%40variation-swatches-for-woocommerce&sfp_email=&sfph_mail=
- https://www.wordfence.com/vulnerability-advisories/#CVE-2021-42367
Products affected by CVE-2021-42367
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:-
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.11
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.12
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.15
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.16
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.21
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.25
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.26
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.27
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.29
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.3
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.30
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.32
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.33
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.35
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.36
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.38
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.4
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.40
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.42
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.44
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.47
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.50
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.52
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.54
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.56
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.59
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.60
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.62
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.63
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.65
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.66
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.67
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.69
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.71
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.72
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.73
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.74
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.76
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.77
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.78
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.84
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.85
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.0.9
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.0
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.1
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.13
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.15
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.17
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.19
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.2
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.3
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.51
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.52
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.53
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.54
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.55
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.55.1
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.55.2
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:1.1.8
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:2.0.0
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:2.0.1
-
cpe:2.3:a:variation_swatches_for_woocommerce_project:variation_swatches_for_woocommerce:2.0.1.1