High · 7.1 CVE-2024-29121 EUVD-2024-26159GHSA-8h88-3c94-mp9f

WordPress WooCommerce License Manager plugin <= 5.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Published Mar 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: firassaidi Product: WooCommerce License Manager Category: Web / CMS

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firassaidi WooCommerce License Manager allows Reflected XSS.This issue affects WooCommerce License Manager: from n/a through 5.3.1.

Affected products

Vendor	Product	Affected	Fixed
Firassaidi	WooCommerce License Manager	≤ 5.3.1	—

References

https://patchstack.com/database/vulnerability/fs-license-manager/wordpress-woocommerce-license-manager-plugin-5-3-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry