PT-2025-39018 · WordPress · Product Time Countdown For Woocommerce
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Product Time Countdown for WooCommerce versions through 1.6.4
Description
The software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting (XSS). This allows for the injection of malicious scripts into web pages. The issue is categorized as Stored XSS, meaning the malicious script is persistently stored on the target server.
Recommendations
Update Product Time Countdown for WooCommerce to a version later than 1.6.4.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Product Time Countdown For Woocommerce