CVE-2024-9217

creationtimestamp| type| source ---|---|--- 2025-03-01 05:27:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6049 2025-03-01 08:05:10+00:00| seen| https://t.me/cvedetector/19212 2025-03-02 11:46:31+00:00| seen| Telegram/HYgPW4EBx-TXIWfSu3kYf4STy1U0Kr0YSposNMBI160WSM...

CVE-2024-9217

CVE-2024-9217 (Currency Switcher for WooCommerce, WordPress) is a reflected cross-site scripting vulnerability in versions

CVE-2024-9217 Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting

The Currency Switcher for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.16.2. This makes it possible for unauthenticated attackers to inject arbitrary w...