CVE-2024-1743 – The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and …

Vuln ID: CVE-2024-1743

Published:  2024-04-24  05:15:46.977

Description: The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Base Score:

Vector:

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):