PT-2026-22134 · Woocommerce+1 · Woocommerce+1

Bonds

·

CVE-2026-28132

·

Publicado

2026-02-26

·

Atualizado

2026-02-26

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions villatheme WooCommerce Photo Reviews versions through 1.4.4
Description The software contains a flaw related to improper handling of script-related HTML tags on a web page, leading to a Basic Cross-Site Scripting (XSS) condition. This allows for code injection.
Recommendations Update villatheme WooCommerce Photo Reviews to a version later than 1.4.4.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-80

Identificadores relacionados

CVE-2026-28132

Produtos afetados

Woocommerce
Woocommerce Photo Reviews