Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-35680 EUVD-2024-35439GHSA-jjqh-vpv3-5xwj

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability

Published Jun 10, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.9.2.

Affected products

VendorProductAffectedFixed
YITHEMES YITH WooCommerce Product Add-Ons ≤ 4.9.2 —

References