7.1
High
CVE-2024-47367 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.13.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| YITH WooCommerce Product Add-Ons 4.13 | earliest → 4.13.0 | No fix stated |
| YITH WooCommerce Product Add-Ons 4.13 | earliest → 4.13.0 | No fix stated |
Other CVEs of YITH WooCommerce Product Add-Ons
The 8 CVEs of YITH WooCommerce Product Add-Ons →
CVE-2026-66480
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce…
5.3
Medium
CVE-2026-42383
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH…
7.6
High
CVE-2023-46635
Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows…
5.3
Medium
CVE-2024-50448
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
7.1
High