Beveiligingsadvies

CVE-2024-7846

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-23 06:00:01
Laatst bijgewerkt 2024-09-23 15:27:52
Toegewezen door WPScan
CVSS-score 5.4
Status PUBLISHED

Beschrijving

YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes. This makes it possible for Contributors+ attackers to inject arbitrary scripts.