CVE-2024-35698: WordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Tab Manager yith-woocommerce-tab-manager.This issue affects YITH WooCommerce Tab Manager: from n/a through <= 1.35.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35698?
CVE-2024-35698 is classified as a medium severity vulnerability due to its potential for enabling stored XSS attacks.
How do I fix CVE-2024-35698?
To fix CVE-2024-35698, you should update YITH WooCommerce Tab Manager to version 1.35.1 or later.
Which versions of YITH WooCommerce Tab Manager are affected by CVE-2024-35698?
CVE-2024-35698 affects YITH WooCommerce Tab Manager versions up to and including 1.35.0.
What type of vulnerability is CVE-2024-35698?
CVE-2024-35698 is an improper neutralization of input during web page generation vulnerability that leads to stored cross-site scripting (XSS).
Who is impacted by CVE-2024-35698?
Users of YITH WooCommerce Tab Manager versions prior to 1.35.1 are impacted by CVE-2024-35698.