CVE-2024-12435

The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘sfeature’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2024-12435

CVE-2024-12435 affects the WordPress plugin Compare Products for WooCommerce and is a reflected cross-site scripting (XSS) vulnerability via the s_feature parameter in all versions up to and including 3.2.1. Root cause: insufficient input sanitization and lack of proper output escaping. Impact: u...

CVE-2024-12435 Compare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting

The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘sfeature’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...