CVE-2024-50448

보통 6.1CVE-2024-50448 · Published 28/10/2024 · updated 17/06/2026

요약

CVE-2024-50448은(는) yith woocommerce product add-ons (yithemes)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.33%, 전체 취약점의 25.8%보다 높음.
조치: 4.14.2 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
yith woocommerce product add-ons yithemes	`< 4.14.2`	`4.14.2`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.14.1.

References

patchstack.com/database/Wordpress/Plugin/yith-woocommerce-product-add-ons/vulnerability/wordpress-yith-woocommerce-product-add-ons-plugin-4-14-1-reflected-cross-site-scripting-xss-vulnerability

yith woocommerce product add-ons의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

yith woocommerce product add-ons

yithemes

< 4.14.2

4.14.2

yith woocommerce product add-ons의 다른 취약점

모두 보기 →