Threats tagged 'ghsa-mvc4-cj72-x4w5'

A stored cross-site scripting (XSS) vulnerability exists in YITH WooCommerce Ajax Product Filter up to version 5.24.0. This flaw allows improper neutralization of input during web page generation, potentially enabling attackers with limited privileges to execute malicious scripts in the context of other users. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact.