CVE-2024-1743: falha de média gravidade em WooCommerce Customers Manager
WooCommerce Customers Manager < 29.8 - Reflected XSS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.3%
The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
Unknown · WooCommerce Customers ManagerCVEs relacionadas — WooCommerce Customers Manager
No mesmo produto, das mais perigosas para as menos.
CVE-2024-0399HIGHWooCommerce Customers Manager < 29.7 - Subscriber+ SQL InjectionEPSS 2.9%CVE-2024-1756MEDIUMWooCommerce Customers Manager < 29.8 - Subscriber+ Email DisclosureEPSS 0.3%CVE-2024-3983HIGHWooCommerce Customers Manager < 30.1 - Bulk Action via CSRFEPSS 0.3%CVE-2024-2843MEDIUMWooCommerce Customers Manager < 30.1 - User Deletion via CSRFEPSS 0.3%CVE-2024-1747MEDIUMWooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSSEPSS 0.2%