CVE-2024-43127: WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43127?
CVE-2024-43127 is classified as a reflected Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2024-43127?
To fix CVE-2024-43127, update the Products, Order & Customers Export for WooCommerce plugin to version 2.0.12 or later.
What versions are affected by CVE-2024-43127?
CVE-2024-43127 affects all versions of Products, Order & Customers Export for WooCommerce up to and including 2.0.11.
What type of vulnerability is CVE-2024-43127?
CVE-2024-43127 is an improper neutralization of input during web page generation, leading to XSS.
Who is impacted by CVE-2024-43127?
Users of the Products, Order & Customers Export for WooCommerce plugin versions 2.0.1 through 2.0.11 are impacted by CVE-2024-43127.