CVE-2023-2256 | BDVDB-2026-203459 Detail

Product Addons & Fields for WooCommerce

Description#

The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/1187e041-3be2-4613-8d56-c2394fcc75fb

Exploit#

https://wpscan.com/vulnerability/1187e041-3be2-4613-8d56-c2394fcc75fb

History#

Version 12023-05-30Record published in the CVE List.
Version 22025-01-10Most recent update recorded in the CVE List.