CVE-2024-47367

Summary

CVE-2024-47367 is a Cross-site Scripting (XSS) vulnerability affecting the YITH WooCommerce Product Add-Ons plugin. The issue, which permits Reflected XSS attacks, can be exploited by attackers to inject malicious scripts into a webpage viewed by other users. This vulnerability affects versions of the plugin from n/a through 4.13.0. Successful exploitation could lead to unauthorized access, data theft, or account takeover. To mitigate this risk, users are advised to update the plugin to the latest version, or consider alternative solutions, and employ Content Security Policy (CSP) headers to prevent XSS attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.