Reflected Cross-Site Scripting Vulnerability in Shipping via Planzer for WooCommerce Plugin

CVE-2024-12337

Summary

The Shipping via Planzer for WooCommerce plugin for WordPress has a vulnerability that allows unauthenticated attackers to exploit reflected cross-site scripting through the ‘processed-ids’ parameter. All versions up to and including 1.0.25 are affected due to inadequate input sanitization and output escaping. This flaw enables attackers to inject arbitrary web scripts, potentially compromising the integrity of user interactions by tricking them into clicking manipulated links. To mitigate this threat, users are urged to update to the latest version of the plugin, where these security issues have been addressed.

References