CVE-2026-96352 Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions

Description

Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
YITH WooCommerce Ajax Search 2.28	premières → 2.28.0	Pas de correctif indiqué

Autres CVE de YITH WooCommerce Ajax Search

Les 3 CVE de YITH WooCommerce Ajax Search →

CVE-2024-47350 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITHEMES YITH… 9.3 Critique CVE-2024-4455 The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘item’… 7.2 Élevée