CVE-2024-1743

MEDIUM

WooCommerce Customers Manager < 29.8 - Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-1743 has a selected CVSS score of 5.9 (medium).

Description

The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 1, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

WooCommerce Customers Manager

Default status: unaffected

CVE ListBefore 29.8affected

woocommerce_customers_manager

Browse woocommerce / woocommerce_customers_manager

Default status: unknown

CVE List*affected

References

2