Xml For Google Merchant Center Vulnerabilities

[en] The XML for Google Merchant Center plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'feed_id' parameter in all versions up to, and including, 3.0.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web s...

Affected:

up to 3.0.12

Fixed in:

3.0.12

Disclosed:

Jan 22, 2025

CVE-2024-13406 on NVD →

The XML for Google Merchant Center plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'feed_id' parameter in all versions up to, and including, 3.0.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

CVSS:

6.1

Affected:

up to 3.0.11

Fixed in:

3.0.12

Disclosed:

Jan 21, 2025

CVE-2024-13406 on NVD →

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov XML for Google Merchant Center plugin <= 3.0.1 versions.

Affected:

up to 3.0.2

Fixed in:

3.0.2

Disclosed:

Aug 17, 2023

CVE-2023-30877 on NVD →

The XML for Google Merchant Center plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page’ parameter in versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pag...

CVSS:

6.1

Affected:

up to 3.0.1

Fixed in:

3.0.2

Disclosed:

Apr 24, 2023

CVE-2023-30877 on NVD →