cleantalk
Vulnerabilities and Security Researches

Advanced Dynamic Pricing for WooCommerce, CVE-2025-24632

CVE, Research URL

CVE-2025-24632

Published on
Jan 31, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce allows Reflected XSS. This issue affects Advanced Dynamic Pricing for WooCommerce: from n/a through 4.9.0.
Affected versions
Min -, max 4.9.1.
Status
vulnerable