CVE-2024-7846

Published: 2024-09-23T06:15Z

Last Modified: 2024-09-26T13:32Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes. This makes it possible for Contributors+ attackers to inject arbitrary scripts. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt