The "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress has XSS via the includes/pages/redirect.php page parameter.
Analyzing vulnerability vectors…
Your command center for real-time vulnerability intelligence — built for security professionals who need answers fast.
No card required. Sign up in seconds to unlock: