CVE-2024-9178 XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level...

CVE-2024-9178 XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level...

CVE-2024-9178

CVE-2024-9178 affects XT Floating Cart for WooCommerce (WordPress). It enables Stored XSS via SVG file uploads due to insufficient input sanitization and output escaping. Vulnerable in all versions up to 2.8.2; requires authentication at Author level or higher. Red Hat and Wordfence entries indic...

WordPress XT Floating Cart for WooCommerce Plugin <= 2.8.2 is vulnerable to Cross Site Scripting (XSS)

Software XT Floating Cart for WooCommerce Type Plugin Vulnerable versions = 2.8.2 Fixed in 2.8.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9178 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e5cbcbd17b66 Credits Frances...