VYPR

Wpc Composite Products

by WordPress

Source repositories

CVEs (1)

  • CVE-2024-2838MedApr 27, 2024
    risk 0.35cvss 6.4epss 0.00

    The WPC Composite Products for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wooco_components[0][name]' parameter in all versions up to, and including, 7.2.7 due to insufficient input sanitization and output escaping and missing…