VYPR
Unrated severityNVD Advisory· Published Mar 14, 2022· Updated Aug 3, 2024

Persian Woocommerce <= 5.8.0 - Reflected Cross-Site Scripting

CVE-2021-24940

Description

The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which could lead to a Reflected Cross-Site Scripting issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.