Variations Radio Buttons For Woocommerce Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OneTeamSoftware Radio Buttons and Swatches for WooCommerce allows Reflected XSS. This issue affects Radio Buttons and Swatches for WooCommerce: from n/a through 1.1.20.

Affected:

up to 1.1.21

Fixed in:

1.1.21

Disclosed:

Jan 31, 2025

CVE-2025-24551 on NVD →

The Radio Buttons and Swatches for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.1.20 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVSS:

6.1

Affected:

up to 1.1.20

Fixed in:

1.1.21

Disclosed:

Nov 15, 2024

CVE-2025-24551 on NVD →