Cross-site Scripting Vulnerability in Perfect Solution WP eCommerce Quickpay

CVE-2024-56023

What is CVE-2024-56023?

The WP eCommerce Quickpay plugin from Perfect Solution contains a vulnerability that leads to improper validation of user input during web page generation, resulting in Reflected Cross-site Scripting (XSS). This flaw affects versions from n/a up to 1.1.0, making it possible for attackers to inject malicious scripts that may be executed in the context of users' browsers, potentially compromising their data and privacy.

References