Description The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions. Remediation References CVE-2024-27186 Related Vulnerabilities Oracle Database Server CVE-2014-4290 Vulnerability (CVE-2014-4290) WordPress Plugin WooCommerce Cross-Site Scripting (2.6.3) WordPress Plugin Zingiri Web Shop Cookie Multiple SQL Injection Vulnerabilities (2.4.7) Oracle Application Server CVE-2008-7234 Vulnerability (CVE-2008-7234) WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (2.10.3) Severity Medium Classification CVE-2024-27186 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities