Yith Woocommerce Tab Manager
Monthly
Stored cross-site scripting in YITH Tab Manager (YITH WooCommerce Tab Manager) versions up to 2.15.0 allows an authenticated attacker with Author-level privileges to inject persistent JavaScript into tab content that executes when a higher-privileged user views the affected page. The vulnerability is rated CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) and requires user interaction, meaning a separate victim must view the malicious tab. No public exploit code has been identified at time of analysis, and CISA KEV does not list this CVE.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Tab Manager yith-woocommerce-tab-manager.35.0. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Stored cross-site scripting in YITH Tab Manager (YITH WooCommerce Tab Manager) versions up to 2.15.0 allows an authenticated attacker with Author-level privileges to inject persistent JavaScript into tab content that executes when a higher-privileged user views the affected page. The vulnerability is rated CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) and requires user interaction, meaning a separate victim must view the malicious tab. No public exploit code has been identified at time of analysis, and CISA KEV does not list this CVE.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Tab Manager yith-woocommerce-tab-manager.35.0. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.