Sip Reviews Shortcode Woocommerce Vulnerabilities

The SIP Reviews Shortcode for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'no_of_reviews' attribute in the woocommerce_reviews shortcode in all versions up to, and including, 1.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

CVSS:

6.5

Affected:

up to 1.2.3

Fixed in:

1.3.0

Disclosed:

Oct 31, 2024

CVE-2024-6479 on NVD →

The SIP Reviews Shortcode for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'no_of_reviews' attribute in the woocommerce_reviews shortcode in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This make...

CVSS:

6.4

Affected:

up to 1.2.3

Fixed in:

1.3.0

Disclosed:

Oct 31, 2024

CVE-2024-6480 on NVD →