← CVE Intelligence

CVE-2024-27994

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.5.0.

Affected (CNA)

Vendor / productVersions
YITHEMES / YITH WooCommerce Product Add-Onsaffected 0 through 4.5.0

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.