7.1
Élevée
CVE-2024-47367 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.13.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| YITH WooCommerce Product Add-Ons 4.13 | premières → 4.13.0 | Pas de correctif indiqué |
| YITH WooCommerce Product Add-Ons 4.13 | premières → 4.13.0 | Pas de correctif indiqué |
Autres CVE de YITH WooCommerce Product Add-Ons
Les 8 CVE de YITH WooCommerce Product Add-Ons →
CVE-2026-66480
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce…
5.3
Moyenne
CVE-2026-42383
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH…
7.6
Élevée
CVE-2023-46635
Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows…
5.3
Moyenne
CVE-2024-50448
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH…
7.1
Élevée