CVE-2024-13461

The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on...

CVE-2024-13461

creationtimestamp| type| source ---|---|--- 2025-02-21 10:20:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4874 2025-02-21 12:35:18+00:00| seen| Telegram/A-pofhxUOYPGw641gkjHKGHd-AV-9FAmSJHnetNvNqh4uW74 2025-02-21 13:55:33+00:00| seen| https://t.me/cvedetector/18645...

CVE-2024-13461

The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on...

CVE-2024-13461

CVE-2024-13461 affects Autoship Cloud for WooCommerce Subscription Products (WordPress). The vulnerability is a Stored Cross-Site Scripting (XSS) via the autoship-create-scheduled-order-action shortcode, affecting all versions up to 2.8.0, caused by insufficient input sanitization and output esca...

CVE-2024-13461 Autoship Cloud for WooCommerce Subscription Products <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on...