Reflected Cross-Site Scripting in SKU Generator for WooCommerce Plugin

CVE-2024-9212

What is CVE-2024-9212?

The SKU Generator for WooCommerce plugin exposes users to reflected cross-site scripting due to insufficient escaping of user-supplied input in URLs. All versions up to and including 1.6.2 are affected. An unauthenticated attacker can exploit this vulnerability by crafting a malicious link that, when clicked by a user, causes the execution of arbitrary web scripts in their browser. This can lead to serious security implications, including session hijacking, data theft, and website defacement.

References