Vulnerabilities > Dcurasi

DATE CVE VULNERABILITY TITLE RISK
2024-07-21 CVE-2024-37522 Cross-site Scripting vulnerability in Dcurasi CC & BCC for Woocommerce Order Emails
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dario Curasì CC & BCC for Woocommerce Order Emails allows Stored XSS.This issue affects CC & BCC for Woocommerce Order Emails: from n/a through 1.4.1.
network
low complexity
dcurasi CWE-79
4.8