CVE-2024-1743

2024-04-2405:15:46

[email protected]

web.nvd.nist.gov

woocommerce

xss

vulnerability

wordpress

plugin

high privilege users

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

VendorProductVersionCPE
piwebsolutionexport_customers_list_csv_for_woocommerce*cpe:2.3:a:piwebsolution:export_customers_list_csv_for_woocommerce:*:*:*:*:*:*:*:*