CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Cvelist•added 2024/03/15 1:59 p.m.•19 views

CVE-2024-25596 WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2.1.8...

5.9CVSS5.9AI score0.00316EPSS

Exploits0References1

CVE•added 2024/03/15 1:59 p.m.•60 views

CVE-2024-25596

CVE-2024-25596 affects Doofinder for WooCommerce (WordPress). The vulnerability is a Stored XSS due to improper input handling in admin/settings, exploitable by an authenticated administrator. Affected versions are Doofinder for WooCommerce up to 2.1.8; a fix is available in version 2.1.9. Remedi...

5.9CVSS8.6AI score0.00316EPSS

Exploits0References1Affected Software1