Lucene search
WPScanCVELIST:CVE-2024-3964HistoryJul 13, 2024 - 6:00 a.m.
CVE-2024-3964 Product Enquiry for WooCommerce < 3.1.8 - Admin+ Stored XSS
2024-07-1306:00:05
WPScan
www.cve.org
2
woocommerce
xss
stored xss
wordpress
plugin
vulnerability
security
EPSS
0
Percentile
9.3%
The Product Enquiry for WooCommerce WordPress plugin before 3.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CNA Affected
[
{
"vendor": "Unknown",
"product": "Product Enquiry for WooCommerce",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "3.1.8"
}
],
"defaultStatus": "unaffected"
}
]Related
cve
cve
CVE-2024-3964
2024-07-13 06:15:03
nvd
nvd
CVE-2024-3964
2024-07-13 06:15:03
vulnrichment
vulnrichment
CVE-2024-3964 Product Enquiry for WooCommerce < 3.1.8 - Admin+ Stored XSS
2024-07-13 06:00:05