Wishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab Parameter
mediumThe Wishlist for WooCommerce: Multi Wishlists Per Customer PRO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wtab' parameter in versions 3.0.8 to 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
- CVSS:
- 6.1
- Affected:
- 3.0.8 – 3.0.8, 3.0.9 – 3.0.9, 3.1.0 – 3.1.0, 3.1.1 – 3.1.1, 3.1.2 – 3.1.2
- Fixed in:
- 3.1.3
- Disclosed:
- Nov 22, 2024