THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2024-13461 (MEDIUM 6.4) — The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and ou

[NVD] CVE-2024-13461 (MEDIUM 6.4) — The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and ou

lownvdPublished 2025-02-21

CVE-2024-13461 CVSS: 6.4 MEDIUM Published: 2025-02-21T10:15:10.767

The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This make

Indicators of compromise

CVE-2024-13461cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-13461