CVE-2024-24886

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Acowebs Product Labels For Woocommerce Sale Badges allows Stored XSS.This issue affects Product Labels For Woocommerce Sale Badges: from n/a through 1.5.3...

CVE-2024-24886

CVE-2024-24886 affects the WordPress plugin Product Labels For Woocommerce (Sale Badges). Connected sources confirm an authenticated Stored XSS via the badgeLabel parameter in versions up to 1.5.3. Patchstack lists the fix in version 1.5.4, with low CVSS v3.1 score around 5.9, and requires Shop M...