Lucene search
+L

3 matches found

CVE
CVE
•added 2024/10/17 7:05 p.m.•64 views

CVE-2024-49296

CVE-2024-49296 is a stored XSS vulnerability in the WordPress plugin “Custom Add to Cart Button Label and Link” (affected: versions up to 1.6.1). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public exploit details are not...

6.5CVSS5.9AI score0.00253EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/17 12:00 a.m.•3 views

CVE-2024-49296: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JC Custom Add to Cart Button Label and Link woo-custom-cart-button allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through = 1.6.1...

6.5CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/15 11:53 a.m.•17 views

WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Custom Add to Cart Button Label and Link versions = 1.6.1...

6.5CVSS6.1AI score0.00253EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder