CVE-2026-96352 Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions

Description

Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
YITH WooCommerce Ajax Search 2.28	earliest → 2.28.0	No fix stated

Other CVEs of YITH WooCommerce Ajax Search

The 3 CVEs of YITH WooCommerce Ajax Search →

CVE-2024-47350 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITHEMES YITH… 9.3 Critical CVE-2024-4455 The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘item’… 7.2 High