CVE-2024-35728

Name of the Vulnerable Software and Affected Versions PPOM for WooCommerce versions through 32.0.20

Description The issue is related to an Improper Neutralization of Special Elements in Output Used by a Downstream Component, also known as an 'Injection' vulnerability, in Themeisle PPOM for WooCommerce. This allows for Code Inclusion.

Recommendations For versions through 32.0.20, update to a version later than 32.0.20 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.