CVE-2024-1743

CVE-2024-1743: WooCommerce Customers Manager < 29.8 - Reflected XSS

Vendor Unknown
Product WooCommerce Customers Manager
Published April 24, 2024
Last update August 1, 2024

CVSS base score

—

What the vulnerability does

01Description

The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Key dates

02Disclosure timeline

April 24, 2024 CVE published
August 1, 2024 Record updated