漏洞标题
Age Verification - 反射型跨站脚本漏洞(XSS)
漏洞描述信息
在您的结账页面中进行年龄验证,验证客户身份的插件 Age Verification for your checkout page. Verify your customer's identity 1.20.0 存在漏洞。该 web 应用程序在 myapp/class-wc-integration-agechecker-integration.php 中动态生成 web 内容时,未对潜在的不受信数据来源进行验证。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
漏洞类别
对数据真实性的验证不充分
漏洞标题
Age Verification - Reflected cross-site scripting (XSS)
漏洞描述信息
Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
漏洞类别
在Web页面生成时对输入的转义处理不恰当(跨站脚本)