CVE-2024-8873

creationtimestamp| type| source ---|---|--- 2024-11-16 03:55:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113490612254787602 2024-11-16 06:02:30+00:00| seen| https://t.me/cvedetector/11214...

CVE-2024-8873 PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting

The PeproDev WooCommerce Receipt Uploader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.6.9. This makes it possible for unauthenticated attackers to inject arbitrar...