Vulnerability CVE-2023-2256


Published: 2023-05-30

Description:
The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://wpscan.com/vulnerability/1187e041-3be2-4613-8d56-c2394fcc75fb

Copyright 2026, cxsecurity.com

 

Back to Top