Skip to content
Sign in
6.1 Medium

CVE-2024-8716 The XT Ajax Add To Cart for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to…

Description

The XT Ajax Add To Cart for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Affected products and versions

Product Affected versions Fixed in
XT Ajax Add To Cart for WooCommerce 1.1 earliest → 1.1.2 No fix stated

Other CVEs of XT Ajax Add To Cart for WooCommerce

The 2 CVEs of XT Ajax Add To Cart for WooCommerce →
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE