medium5.4
CVE-2024-7846
YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes.
Impact
YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes. This makes it possible for Contributors+ attackers to inject arbitrary scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yithemes | Yith Woocommerce Ajax Search | before 2.7.1 |