CVE-2024-8629

The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.3.7. This makes it possible for unauthenticated attackers to...

CVE-2024-8629

creationtimestamp| type| source ---|---|--- 2024-10-08 12:52:39+00:00| seen| https://t.me/cvedetector/7354...

WordPress WooCommerce Multilingual & Multicurrency Plugin <= 5.3.7 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Multilingual & Multicurrency Type Plugin Vulnerable versions = 5.3.7 Fixed in 5.3.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8629 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83741990a924...