Gravitymaster Vulnerabilities

This vulnerability allows an attacker to inject malicious scripts into the website, which can then execute in the browsers of high-privilege users like administrators. It occurs because the plugin fails to properly clean up the page parameter before displaying it, making it particularly risky for sites using older versions of the plugin.

This vulnerability allows an attacker to inject malicious scripts into web pages viewed by users of the Gravity Master Product Enquiry plugin for WooCommerce, potentially leading to unauthorized actions or data theft. It can be exploited by anyone without needing to log in, as long as they can trick users into clicking on a specially crafted link.