Input validation vulnerability in Staggs – Product Configurator Toolkit 2.0.0

The Staggs Product Configurator for WooCommerce plugin for WordPress has a security issue in versions up to 2.0.0. This vulnerability is called Reflected Cross-Site Scripting and it happens because the plugin doesn’t properly clean and protect the information that is entered and displayed. This could allow hackers to insert harmful code into pages and it will run if a user is tricked into clicking on a link.

Detected in:

Staggs – Product Configurator Toolkit fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.