CVE-2023-36686

Name of the Vulnerable Software and Affected Versions CartFlows Pro plugin versions <= 1.11.11

Description The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized actions on behalf of the user.

Recommendations For CartFlows Pro plugin versions <= 1.11.11, update to a version higher than 1.11.11 to resolve the issue. At the moment, there is no information about other mitigation measures.