CVE-2025-23829
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 3, 2025
CWE ID 79
Summary
CVE-2025-23829 is a Cross-Site Scripting (XSS) vulnerability affecting Woo Update Variations In Cart. The flaw, which lies in the improper neutralization of user inputs during web page generation, can be exploited to inject malicious scripts into a webpage. Successful attacks could lead to the theft of user data or the execution of malicious code, putting websites using Woo Update Variations In Cart versions from n/a through 0.0.9 at risk. Users are urged to apply patches or updates to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.