PT-2024-20569 · Unknown · Adtribes.Io Product Feed Pro For Woocommerce

🗓️ 26 Mar 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

AdTribes Io Product Feed Pro for WooCommerce up to 13.2.5 has reflected XSS; update beyond 13.2.5.

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress Plugin Product Feed PRO for WooCommerce 跨站脚本漏洞	27 Mar 202400:00	–	cnnvd
CVE	CVE-2024-24800	27 Mar 202405:47	–	cve
Cvelist	CVE-2024-24800 WordPress Product Feed PRO for WooCommerce plugin <= 13.2.5 - Reflected Cross Site Scripting (XSS) vulnerability	27 Mar 202405:47	–	cvelist
EUVD	EUVD-2024-22176	3 Oct 202520:07	–	euvd
NVD	CVE-2024-24800	27 Mar 202406:15	–	nvd
Patchstack	WordPress Product Feed PRO for WooCommerce Plugin <= 13.2.5 is vulnerable to Cross Site Scripting (XSS)	26 Mar 202400:00	–	patchstack
RedhatCVE	CVE-2024-24800	5 Feb 202502:20	–	redhatcve
Vulnrichment	CVE-2024-24800 WordPress Product Feed PRO for WooCommerce plugin <= 13.2.5 - Reflected Cross Site Scripting (XSS) vulnerability	27 Mar 202405:47	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (March 25, 2024 to March 31, 2024)	4 Apr 202417:35	–	wordfence
WPVulnDB	Product Feed PRO for WooCommerce by AdTribes – WooCommerce Product Feeds for Google, Facebook/Meta, Bing, & More < 13.2.6 - Reflected Cross-Site Scripting	24 Apr 202400:00	–	wpvulndb

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-24800
twitter	www.twitter.com/CVEnew/status/1772864277613056190
patchstack	www.patchstack.com/database/vulnerability/woo-product-feed-pro/wordpress-product-feed-pro-for-woocommerce-plugin-13-2-5-reflected-cross-site-scripting-xss-vulnerability
t	www.t.me/cvenotify/74797

27 Mar 2024 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 3.17.1

EPSS0.00394

SSVC

AdTribes Io Product Feed Pro WooCommerce plugin reflected XSS versions to 13.2.5