XTENDIFY Vulnerabilities and Affected Products
Vulnerabilities associated with woffice.
Products
Clear product- woffice1 vulnerability
- Woffice CRM1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-37472HIGH | WordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.8. CWE-79Jul 4, 2024 | CVSS7.1v3.1 | EPSS0.333% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |