Описание
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Code Injection.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.9.2.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.9.3 (исключая)
cpe:2.3:a:yithemes:yith_woocommerce_product_add-ons:*:*:*:*:free:wordpress:*:*
EPSS
Процентиль: 38%
0.00168
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-74
Связанные уязвимости
CVSS3: 5.3
github
больше 1 года назад
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Code Injection.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.9.2.
EPSS
Процентиль: 38%
0.00168
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-74