cleantalk
Vulnerabilities and Security Researches

WooCommerce, CVE-2024-35777

CVE, Research URL

CVE-2024-35777

Application

WooCommerce

Published on
Jul 09, 2024
Research Description
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Automattic WooCommerce allows Content Spoofing.This issue affects WooCommerce: from n/a through 8.9.2.
Affected versions
Min -, max 8.4.0.
Status
vulnerable