6.5
Moyenne
CVE-2025-32920 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in templateinvaders…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Stored XSS.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.10.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| TI WooCommerce Wishlist 2.10 | premières → 2.10.0 | Pas de correctif indiqué |
Autres CVE de TI WooCommerce Wishlist
Les 9 CVE de TI WooCommerce Wishlist →
CVE-2025-67929
Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows…
5.3
Moyenne
CVE-2025-9207
The TI WooCommerce Wishlist plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including,…
5.3
Moyenne
CVE-2025-58247
Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows…
5.3
Moyenne
CVE-2025-47577
Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist…
10.0
Critique