PT-2023-24035 · WordPress · Woocommerce Pre-Orders
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
WooCommerce Pre-Orders plugin versions <= 1.9.0
Description
The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability can be exploited without authentication, allowing for reflected cross-site scripting attacks.
Recommendations
For versions <= 1.9.0, update to a version higher than 1.9.0 to resolve the issue.
At the moment, there is no information about other mitigation measures.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Woocommerce Pre-Orders