CVE-2024-9345 Product Delivery Date for WooCommerce – Lite <= 2.7.3 - Reflected Cross-Site Scripting

The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers to inject...

CVE-2024-9345

CVE-2024-9345 refers to a reflected Cross-Site Scripting vulnerability in the WordPress plugin Product Delivery Date for WooCommerce – Lite . The root cause is the use of add_query_arg without proper escaping on the URL, exploitable in all versions up to 2.7.3. Attackers can inject arbitrary scri...