CVE-2023-5348 | BDVDB-2026-219792 Detail

Product Catalog Mode For WooCommerce

Description#

The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/b37b09c1-1b53-471c-9b10-7d2d05ae11f1

Exploit#

https://wpscan.com/vulnerability/b37b09c1-1b53-471c-9b10-7d2d05ae11f1

History#

Version 12023-12-18Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.