Threats tagged 'ghsa-354v-273m-m777'

The WooCommerce Extra Product Options Pro plugin for WordPress up to version 3.3.2 is vulnerable to reflected cross-site scripting (XSS) via specific parameters related to Date & Time Range Picker fields. This vulnerability allows unauthenticated attackers to inject arbitrary scripts that execute when a user interacts with a crafted link on affected product pages. Exploitation requires no prior knowledge beyond viewing the product page source to identify the vulnerable parameter names.