Skip to content
fr Sign in
6.5 Medium

CVE-2026-106604 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Compare yith-woocommerce-compare allows Stored XSS.This issue affects YITH WooCommerce Compare: from n/a through 3.15.0.

Affected products and versions

Product Affected versions Fixed in
YITH WooCommerce Compare 3.15 earliest → 3.15.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of YITH WooCommerce Compare

The 2 CVEs of YITH WooCommerce Compare →
CVE-2024-32699 Cross-Site Request Forgery (CSRF) vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare.This issue… 4.3 Medium
Track this CVE