CVE-2024-39652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

CVE-2024-39652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

CVE-2024-39652

CVE-2024-39652 concerns WooCommerce PDF Vouchers (WPWooCommerce PDF Vouchers plugin). A Reflected Cross-Site Scripting (XSS) vulnerability exists in versions prior to 4.9.5, enabling an attacker to inject or reflect script via input during web page generation. Public sources (NVD, Patchstack, Red...

WordPress WooCommerce PDF Vouchers Plugin < 4.9.5 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce PDF Vouchers Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-39652 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4bf7ebebf09d Credits Dave Jong Patchstack...