7.1
High
CVE-2024-53740 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPSwings…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card: from n/a through < 2.9.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates 2.9 | earliest → < 2.9.1 | 2.9.1 |
| WooCommerce Ultimate Gift Card 2.9 | earliest → 2.9.1 | No fix stated |