CVE-2024-11378

CVE-2024-11378 describes a reflected XSS in the Bizapp for WooCommerce WordPress plugin. The issue occurs in the plugin’s/URL parameter named error and affects all versions up to and including 2.0.8 due to insufficient input sanitization and output escaping. The vulnerability permits unauthentica...

CVE-2024-11378: Improper Neutralization of Input During Web Page Generation

The Bizapp for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'error' parameter in all versions up to, and including, 2.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

WordPress Bizapp for WooCommerce plugin <= 2.0.8 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Bizapp for WooCommerce versions = 2.0.8...