WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2024-43213

What is CVE-2024-43213?

A reflected cross-site scripting (XSS) vulnerability exists in the MultiVendorX WC Marketplace, which arises from improper neutralization of user input during the generation of web pages. This flaw allows an attacker to exploit the vulnerability by crafting a malicious URL that can execute arbitrary scripts within the context of the affected user's session. By targeting users of the WC Marketplace, attackers can potentially gain unauthorized access to sensitive information or perform actions on behalf of the user without their consent, thereby compromising the integrity and security of the application.

References