CVE-2024-11378

creationtimestamp| type| source ---|---|--- 2025-01-07 05:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vfacajk2l 2025-01-07 16:40:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/463...

CVE-2024-11378

CVE-2024-11378 describes a reflected XSS in the Bizapp for WooCommerce WordPress plugin. The issue occurs in the plugin’s/URL parameter named error and affects all versions up to and including 2.0.8 due to insufficient input sanitization and output escaping. The vulnerability permits unauthentica...