← volver
CVE-2023-2256CWE-79

Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting

18Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 1.0%
probabilidad de explotación
1.0%top 42% de las CVE
explotación observada
noninguna fuente lo reporta
The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting.