← Database

CVE-2024-7846

MEDIUM CVSS: 5.4 Published: 2024-09-23 Modified: 2026-06-17

Description

YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes. This makes it possible for Contributors+ attackers to inject arbitrary scripts.

Affected Platforms

Yithemes Yith Woocommerce Ajax Search

Weakness Type

CWE-79

References