CVE Database /
CVE-2024-0251
CVE · Medium
CVE-2024-0251 — Advanced Woo Search – Product Search for WooCommerce [advanced-woo-search] < 2.97
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-0251
|
Advanced Woo Search – Product Search for WooCommerce [advanced-woo-search] < 2.97 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 2.97
|
2.97 |
2024-01-12 |
—
|
CVE-2024-0251
The Advanced Woo Search plugin for WooCommerce versions prior to 2.97 contains a cross-site scripting vulnerability that could permit attackers to inject harmful scripts into affected websites. When site visitors access the compromised site, these injected scripts would execute, potentially delivering redirects, unwanted advertisements, or other malicious HTML content. The vulnerability was identified by Artem Guzhva and has been resolved in version 2.97 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings