PT-2023-29332 · Tyche Softwares · Abandoned Cart Lite For Woocommerce

Robert Devore · Publicado 2023-10-16 · Atualizado 2023-10-19 · CVE-2023-44986

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Tyche Softwares Abandoned Cart Lite for WooCommerce plugin versions <= 5.15.2

Description The issue is related to an Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker with administrative access can inject malicious scripts into the application, potentially leading to unauthorized actions.

Recommendations For Tyche Softwares Abandoned Cart Lite for WooCommerce plugin versions <= 5.15.2, update to a version higher than 5.15.2 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-44986

Produtos afetados

Abandoned Cart Lite For Woocommerce

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-44986 · Nota de Segurança
• https://patchstack.com/database/vulnerability/woocommerce-abandoned-cart/wordpress-abandoned-cart-lite-for-woocommerce-plugin-5-15-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://osv.dev/vulnerability/CVE-2023-44986 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1714013815069642809 · Publicação no Twitter