CVE-2024-35680

Name of the Vulnerable Software and Affected Versions YITH WooCommerce Product Add-Ons versions 4.9.2 and earlier

Description The issue is related to an Improper Neutralization of Special Elements in Output Used by a Downstream Component, also known as an 'Injection' vulnerability, which allows Code Injection in YITH WooCommerce Product Add-Ons.

Recommendations For versions 4.9.2 and earlier, update to a version later than 4.9.2 to resolve the issue. At the moment, there is no information about additional mitigation measures.