Skip to content
Sign in
6.5 Medium

CVE-2026-112199 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Wishlist yith-woocommerce-wishlist allows Stored XSS.This issue affects YITH WooCommerce Wishlist: from n/a through 4.18.1.

Affected products and versions

Product Affected versions Fixed in
YITH WooCommerce Wishlist 4.18 earliest → 4.18.1 No fix stated

Other CVEs of YITH WooCommerce Wishlist

The 3 CVEs of YITH WooCommerce Wishlist →
CVE-2026-27329 Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting… 5.3 Medium CVE-2024-34385 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH… 5.9 Medium
Track this CVE