Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2024/03/15 1:59 p.m.24 views

CVE-2024-25596 WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2.1.8...

5.9CVSS5.9AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/15 1:59 p.m.17 views

CVE-2024-25596 WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2.1.8...

5.9CVSS6.8AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/15 1:59 p.m.64 views

CVE-2024-25596

CVE-2024-25596 affects Doofinder for WooCommerce (WordPress). The vulnerability is a Stored XSS due to improper input handling in admin/settings, exploitable by an authenticated administrator. Affected versions are Doofinder for WooCommerce up to 2.1.8; a fix is available in version 2.1.9. Remedi...

5.9CVSS8.6AI score0.00316EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder