Loading HuntDB...

GHSA-49fx-mg36-mm4r

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.5.0.

Related CVEs

Key Information

GHSA ID
GHSA-49fx-mg36-mm4r
Published
March 21, 2024 3:31 PM
Last Modified
March 21, 2024 3:31 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: September 17, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.