Lucene search
HistoryJun 10, 2024 - 5:16 p.m.
CVE-2024-35728
cve-2024-35728
injection
code inclusion
themeisle ppom
woocommerce
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
Improper Neutralization of Special Elements in Output Used by a Downstream Component (‘Injection’) vulnerability in Themeisle PPOM for WooCommerce allows Code Inclusion.This issue affects PPOM for WooCommerce: from n/a through 32.0.20.
Affected configurations
Node
themeisleproduct_addons_\&_fields_for_woocommerceRange<32.0.21wordpress
Related
cvelist
cvelist
wpvulndb
wpvulndb
vulnrichment
vulnrichment
cve
cve
CVE-2024-35728
2024-06-10 17:16:29
wordfence
wordfence
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
Related for NVD:CVE-2024-35728