Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-7846

YITH WooCommerce Ajax Search < 2.7.1 - Contributor+ Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes. This makes it possible for Contributors+ attackers to inject arbitrary scripts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown YITH WooCommerce Ajax Search

Default version status: unaffected

  • 0 to < 2.7.1affected

References