CVE-2025-24668
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Published Jan 24, 2025
CWE ID 79
Summary
CVE-2025-24668 is a Cross-Site Scripting (XSS) vulnerability affecting Themeisle PPOM for WooCommerce. Malicious scripts can be stored and executed on affected websites due to improper neutralization of user input during web page generation. This issue, which impacts PPOM for WooCommerce versions from n/a to 33.0.8, can lead to unintended execution of malicious code and potential data breaches. Users are advised to update to the latest version or consider alternative solutions to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.