CVE-2021-24300 | BDVDB-2026-154190 Detail

PickPluginsPickPlugins Product Slider for WooCommerce

Description#

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/5fbbc7ad-3f1a-48a1-b2eb-e57f153eb837

Exploit#

No public exploit known

History#

Version 12021-05-24Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.