Cross-Site Scripting Vulnerability in Wetail WooCommerce Fortnox Integration
CVE-2025-47610

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
WooCommerce Fortnox Integration
Vendor
CVE Published:
14 August 2025

What is CVE-2025-47610?

The Wetail WooCommerce Fortnox Integration is susceptible to Cross-Site Scripting (XSS) attacks due to improper validation of user input during web page generation. This flaw enables attackers to inject malicious code, which could lead to the storage and subsequent execution of harmful scripts in a user's browser. Users running versions prior to 4.5.6 of the WooCommerce Fortnox Integration are particularly at risk. It is crucial to apply the latest updates to mitigate the potential impact of such vulnerabilities.

Affected Version(s)

WooCommerce Fortnox Integration <= 4.5.6

References

https://patchstack.com/database/wordpress/plugin/woocomme...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Xuan Chien (Patchstack Alliance)
.