Reflected XSS Vulnerability in Jigoshop - Store Toolkit

CVE-2024-51712

What is CVE-2024-51712?

The vulnerability in the Visser Labs Jigoshop – Store Toolkit is due to improper neutralization of input during web page generation, which allows for reflected Cross-Site Scripting (XSS). An attacker can exploit this flaw to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions or data theft. This affects all versions up to 1.4.0 of the Jigoshop – Store Toolkit, posing a significant risk to the security of web applications utilizing this plugin.

References