7.1
High
CVE-2024-50448 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.14.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| YITH WooCommerce Product Add-Ons 4.14 | earliest → 4.14.1 | No fix stated |
| YITH WooCommerce Product Add-Ons 4.14 | earliest → 4.14.1 | No fix stated |
Other CVEs of YITH WooCommerce Product Add-Ons
The 8 CVEs of YITH WooCommerce Product Add-Ons →
CVE-2026-66480
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce…
5.3
Medium
CVE-2026-42383
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH…
7.6
High
CVE-2023-46635
Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows…
5.3
Medium
CVE-2024-47367
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
7.1
High