Vulnerabilities > Xplodedthemes > XT Floating Cart FOR Woocommerce > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-05 | CVE-2024-9178 | Cross-site Scripting vulnerability in Xplodedthemes XT Floating Cart for Woocommerce The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping. | 5.4 |