CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Themeisle PPOM for WooCommerce allows Code Inclusion.This issue affects PPOM for WooCommerce: from n/a through 32.0.20.
Explanation of Vulnerability in Simple Terms
PPOM for WooCommerce versions up to 32.0.20 contain an input validation flaw that allows unauthenticated attackers to modify data through the network. The vulnerability stems from insufficient sanitization of user input, enabling integrity attacks without requiring authentication or user interaction. Site administrators should update to a version newer than 32.0.20.
What an attacker can do
Modify data on the site without authentication or user interaction.
Potential impact on your site
Attackers can alter site data, potentially affecting product information, orders, or customer records.
Conditions required to exploit
Network access only; no authentication or user action required.
Key dates
External resources
Related vulnerabilities
