Description
YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes. This makes it possible for Contributors+ attackers to inject arbitrary scripts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | YITH WooCommerce Ajax Search | < 2.7.1 | 2.7.1 |
References
- https://wpscan.com/vulnerability/86f7a136-d09b-4637-97ae-2cdaaff172a3/ exploit vdb-entry technical-description