CVE-2024-1743

CVE-2024-1743: WooCommerce Customers Manager < 29.8 - Reflected XSS

Vendor Unknown
Product WooCommerce Customers Manager
Published April 24, 2024
Last update August 1, 2024

CVSS base score

What the vulnerability does

01Description

The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Key dates

02Disclosure timeline

April 24, 2024 CVE published
August 1, 2024 Record updated