2024-11-25
:
The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress (up to version 1.3.6.3) is vulnerable to Reflected Cross-Site Scripting (XSS) due to insufficient input validation. This allows attackers to inject malicious scripts into web pages, potentially compromising users who visit those pages.
Vulnerability Details:
Platform: WordPress
Version: HUSKY – Products Filter Professional for WooCommerce plugin versions up to 1.3.6.3
Vulnerability: Reflected Cross-Site Scripting (XSS)
Severity: Medium
Date: November 19, 2024 (Published), November 25, 2024 (Last Modified)
What Undercode Says:
This vulnerability can be exploited by attackers to steal user data, redirect users to malicious websites, or perform other harmful actions. It’s crucial to update the HUSKY – Products Filter Professional plugin to version 1.3.6.4 or later to address this security issue.
References:
Reported By: Nvd.nist.gov
Undercode AI: https://ai.undercodetesting.com
Image Source:
OpenAI: https://openai.com
Undercode AI DI v2: https://ai.undercode.help