Medium severity5.4NVD Advisory· Published Sep 23, 2024· Updated Jun 17, 2026

CVE-2024-7846

Description

YITH WooCommerce Ajax Search is vulnerable to a XSS vulnerability due to insufficient sanitization of user supplied block attributes. This makes it possible for Contributors+ attackers to inject arbitrary scripts.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yithemes/Yith Woocommerce Ajax Search2 versions
cpe:2.3:a:yithemes:yith_woocommerce_ajax_search:*:*:*:*:free:wordpress:*:*+ 1 more
- cpe:2.3:a:yithemes:yith_woocommerce_ajax_search:*:*:*:*:free:wordpress:*:*range: <2.7.1
- (no CPE)range: 0
WordPress/Yith Woocommerce Ajax Searchllm-fuzzy
Package: https://wordpress.org/plugins/yith-woocommerce-ajax-search

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/86f7a136-d09b-4637-97ae-2cdaaff172a3/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000