Threats tagged 'ghsa-8cfg-993j-vf72'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2025-4212The Checkout Files Upload for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file High7.22025-11-18GCVE DatabaseCVE-2025-4212 The Checkout Files Upload for WooCommerce WordPress plugin versions up to and including 2.2.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows unauthenticated attackers to inject malicious scripts via file uploads due to insufficient input sanitization and output escaping. The injected scripts execute when a user accesses the affected page, potentially compromising user interactions. Report on CVE-2025-4212 Vulnerability CWE-79 #ghsa-8cfg-993j-vf72	GCVE Database	2025-11-18

Page 1 of 1