Skip to content
Sign in
6.5 Medium

CVE-2025-32207 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Stored XSS.This issue affects Ni WooCommerce Cost Of Goods: from n/a through <= 3.2.8.

Affected products and versions

Product Affected versions Fixed in
Ni WooCommerce Cost Of Goods 3.2 earliest → 3.2.8 No fix stated

Other CVEs of Ni WooCommerce Cost Of Goods

The 3 CVEs of Ni WooCommerce Cost Of Goods →
CVE-2025-31826 Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows… 5.4 Medium CVE-2024-53783 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anzar Ahmed Ni… 7.6 High
Track this CVE