When submitting a product information update request, vulnerable versions of WooCommerce didn’t sanitize the value of product sale price on the server side so that the injected code was also included in the product web page. It could be exploited to attack innocent users visiting the tampered product web page. Any user with edit or higher permission could exploit this vulnerability.
Official description: Fix – Potential XSS within price.php fixed with escape on get_price() (would require edit/admin permissions to take advantage of). Discovered by FortiGuard Labs (https://www.fortiguard.com/). Template version has been bumped.
This vulnerability affects the following application versions:
- WooCommerce 2.0.0
- WooCommerce 2.0.0-RC1
- WooCommerce 2.0.0-RC2
- WooCommerce 2.0.0-RC3
- WooCommerce 2.0.1
- WooCommerce 2.0.2
- WooCommerce 2.0.3
- WooCommerce 2.0.4
- WooCommerce 2.0.5
- WooCommerce 2.0.6
- WooCommerce 2.0.7
- WooCommerce 2.0.8
- WooCommerce 2.0.9
- WooCommerce 2.0.10
- WooCommerce 2.0.11
- WooCommerce 2.0.12
- WooCommerce 2.0.13
- WooCommerce 2.0.14
- WooCommerce 2.0.15
- WooCommerce 2.0.16
- WooCommerce 2.0.17
- WooCommerce 2.0.18
- WooCommerce 2.0.19
- WooCommerce 2.0.20
- WooCommerce 2.1.0
- WooCommerce 2.1.0-RC1
- WooCommerce 2.1.0-RC2
- WooCommerce 2.1.1
- WooCommerce 2.1.2
- WooCommerce 2.1.3
- WooCommerce 2.1.4
- WooCommerce 2.1.5
- WooCommerce 2.1.6
- WooCommerce 2.1.7
- WooCommerce 2.1.8
- WooCommerce 2.1.9
- WooCommerce 2.1.10
- WooCommerce 2.1.11
- WooCommerce 2.1.12
- WooCommerce 2.2.0
- WooCommerce 2.2.0-RC1
- WooCommerce 2.2.1
- WooCommerce 2.2.2
- WooCommerce 2.2.3
- WooCommerce 2.2.4
- WooCommerce 2.2.5
- WooCommerce 2.2.6
- WooCommerce 2.2.7
- WooCommerce 2.2.8
- WooCommerce 2.2.9
- WooCommerce 2.2.10
- WooCommerce 2.2.11
- WooCommerce 2.3.0
- WooCommerce 2.3.0-RC1
- WooCommerce 2.3.1
- WooCommerce 2.3.2
- WooCommerce 2.3.3
- WooCommerce 2.3.4
- WooCommerce 2.3.5
- WooCommerce 2.3.6
- WooCommerce 2.3.7
- WooCommerce 2.3.8
- WooCommerce 2.3.9
- WooCommerce 2.3.10
- WooCommerce 2.3.11
- WooCommerce 2.3.12
- WooCommerce 2.3.13
- WooCommerce 2.4.0
- WooCommerce 2.4.0-RC1
- WooCommerce 2.4.1
- WooCommerce 2.4.2
- WooCommerce 2.4.3
- WooCommerce 2.4.4
- WooCommerce 2.4.5
- WooCommerce 2.4.6
- WooCommerce 2.4.7
- WooCommerce 2.4.8