Skip to content
Sign in
7.1 High

CVE-2024-56265 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweb…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a through < 4.9.9.

Affected products and versions

Product Affected versions Fixed in
WooCommerce PDF Vouchers 4.9 earliest → 4.9.9 No fix stated

Other CVEs of WooCommerce PDF Vouchers

The 3 CVEs of WooCommerce PDF Vouchers →
CVE-2024-54383 Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege… 9.8 Critical CVE-2024-39651 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPWeb WooCommerce PDF… 8.6 High
Track this CVE