Threats tagged 'ghsa-f5q9-9f53-pc34'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123134The Smoove abandoned cart trigger for WooCommerce WordPress plugin before 4.3.6 does not sanitise and escape High2026-11-11GCVE DatabaseCVE-2026-123134 The Smoove abandoned cart trigger for WooCommerce WordPress plugin versions before 4.3.6 does not properly sanitise and escape abandoned-cart data submitted by visitors. This flaw allows unauthenticated users to perform stored cross-site scripting (XSS) attacks against administrators by injecting malicious scripts that are executed in the admin dashboard. Report on CVE-2026-123134 Vulnerability #ghsa-f5q9-9f53-pc34	GCVE Database	2026-11-11

Page 1 of 1