TI-2024-14431 CVE-2024-21745 · GHSA-5c9f-6cwg-mhc5WordPress Laybuy Payment Extension for WooCommerce Plugin <= 5.3.9 is vulnerable to Cross Site Scripting (XSS)Priority LOW 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Stored XSS.This issue affects Laybuy Payment Extension for WooC…CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00367 · Published 2024-01-08 · No fix listed CWE-79