PT-2023-29332 · Tyche Softwares · Abandoned Cart Lite For Woocommerce

Robert Devore · Published 2023-10-16 · Updated 2023-10-19 · CVE-2023-44986

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Tyche Softwares Abandoned Cart Lite for WooCommerce plugin versions <= 5.15.2

Description The issue is related to an Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker with administrative access can inject malicious scripts into the application, potentially leading to unauthorized actions.

Recommendations For Tyche Softwares Abandoned Cart Lite for WooCommerce plugin versions <= 5.15.2, update to a version higher than 5.15.2 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-44986

Affected Products

Abandoned Cart Lite For Woocommerce

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-44986 · Security Note
• https://osv.dev/vulnerability/CVE-2023-44986 · Vendor Advisory
• https://patchstack.com/database/vulnerability/woocommerce-abandoned-cart/wordpress-abandoned-cart-lite-for-woocommerce-plugin-5-15-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1714013815069642809 · Twitter Post