CVE-2025-47487: Moreconvert Team MC Woocommerce Wishlist, XSS

Описание

Оригинално описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Reflected XSS.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.9.1.

Засегнати продукти

• Moreconvert Team MC Woocommerce Wishlist: до 1.9.1

Вид слабост

• CWE-79 XSS

История

Други уязвимости в Moreconvert Team MC Woocommerce Wishlist

• 7.6CVE-2026-66631
• 7.1CVE-2026-57356
• 7.6CVE-2025-30879
• 5.3CVE-2024-34819
• 5.3CVE-2024-34813

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-47487
• https://nvd.nist.gov/vuln/detail/CVE-2025-47487
• https://patchstack.com/database/Wordpress/Plugin/smart-wishlist-for-more-convert/vulnerability/wordpress-mc-woocommerce-wishlist-1-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve