Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pakpobox alfred24 Click & Collect plugin <= 1.1.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pakpobox | alfred24 Click & Collect | ≤ 1.1.7 | — |
Medium · 5.9
CVE-2022-47158
EUVD-2022-49933GHSA-86vg-36hj-rcm9
WordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Published Apr 24, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack