Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 22/01/2025 Updated: 22/01/2025

Reflected XSS in Google Merchant Center Plugin Up to 3.0.11

The XML for Google Merchant Center plugin for WordPress, up to version 3.0.11, has a vulnerability. This is a Reflected Cross-Site Scripting issue via the 'feed_id' parameter. The problem is because of not enough input sanitization and output escaping. Unauthenticated attackers can inject harmful scripts. These scripts run if they can get a user to click on a certain link.

Vulnerable Product	Search on Vulmon	Subscribe to Product
icopydoc xml for google merchant center

CWE-79 https://nvd.nist.gov https://www.first.org/epss https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226403%40xml-for-google-merchant-center&new=3226403%40xml-for-google-merchant-center&sfp_email=&sfph_mail=https://www.wordfence.com/threat-intel/vulnerabilities/id/070f66ae-65aa-4670-8b69-103070a000a4?source=cve

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-13406

Vulnerability Summary

References

Vulmon Search

About

Products

Connect