Reflected Cross-Site Scripting Vulnerability in Shipping via Planzer for WooCommerce Plugin

CVE-2024-12337

What is CVE-2024-12337?

The Shipping via Planzer for WooCommerce plugin for WordPress has a vulnerability that allows unauthenticated attackers to exploit reflected cross-site scripting through the ‘processed-ids’ parameter. All versions up to and including 1.0.25 are affected due to inadequate input sanitization and output escaping. This flaw enables attackers to inject arbitrary web scripts, potentially compromising the integrity of user interactions by tricking them into clicking manipulated links. To mitigate this threat, users are urged to update to the latest version of the plugin, where these security issues have been addressed.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References