CVE-2025-22622CWE-79

Age Verification - Reflected cross-site scripting (XSS)

Medium · published February 19, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00284 · 19.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-02-19T03:51Z
EPSS history
Timeline
  • 19 FEB 03:51Z
    Age Verification - Reflected cross-site scripting (XSS)
    cvelistv5