CVE-2024-8872

The Store Hours for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.3.20. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-8872

The CVE-2024-8872 entry concerns Store Hours for WooCommerce (WordPress) versions ≤ 4.3.20, which are vulnerable to Reflected Cross-Site Scripting due to improper escaping in the URL when using add_query_arg. The vulnerability enables unauthenticated attackers to inject arbitrary scripts into pag...