Reflected Cross-Site Scripting Vulnerability in Pósturinn Shipping Plugin for WooCommerce
CVE-2024-11815
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 9 January 2025
What is CVE-2024-11815?
The Pósturinn Shipping with WooCommerce plugin for WordPress is susceptible to a reflected cross-site scripting flaw. This vulnerability arises from poor sanitization of input data and improper escaping of output, allowing unauthenticated attackers to inject malicious scripts into web pages. If users are deceived into interacting with maliciously crafted links, the scripts can execute in their browsers, posing a significant risk to user data and site integrity. Affected users should update to the latest version to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Pósturinn\'s Shipping with WooCommerce * <= 1.3.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved