WordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2024-54231

What is CVE-2024-54231?

A Cross-Site Scripting vulnerability has been identified within Anzia's Ni WooCommerce Order Export plugin. This flaw arises from improper neutralization of user input during web page generation, allowing attackers to inject malicious scripts that can be executed in the context of the user's browser. The exploitation of this vulnerability could enable unauthorized actions, such as stealing sensitive information or perpetuating further attacks. Users operating Ni WooCommerce Order Export versions 3.1.6 and earlier are advised to take immediate precautions to ensure their systems remain secure.

References