Local Delivery Drivers For Woocommerce
Monthly
Unauthenticated cross-site scripting in Local Delivery Drivers for WooCommerce 3.0.0 and below allows remote, unauthenticated attackers to inject persistent malicious scripts that execute in the browser context of authenticated site administrators or other privileged users. The changed scope (S:C) in the CVSS vector signals that successful exploitation crosses security boundaries beyond the plugin itself, enabling attacker access to administrator browser sessions. No public exploit code has been identified at time of analysis, and the vulnerability does not appear on the CISA Known Exploited Vulnerabilities catalog.
Unauthenticated cross-site scripting in Local Delivery Drivers for WooCommerce 3.0.0 and below allows remote, unauthenticated attackers to inject persistent malicious scripts that execute in the browser context of authenticated site administrators or other privileged users. The changed scope (S:C) in the CVSS vector signals that successful exploitation crosses security boundaries beyond the plugin itself, enabling attacker access to administrator browser sessions. No public exploit code has been identified at time of analysis, and the vulnerability does not appear on the CISA Known Exploited Vulnerabilities catalog.