title: WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
description: The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles
problem types: CWE-116 Improper Encoding or Escaping of Output
affected:
{
vendor: Unknown
product: WooCommerce
versions:
status: affected, versionType: custom, version: 0, lessThan: 6.6.0
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}