Vulnerability CVE-2023-5348


Published: 2023-12-18

Description:
The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.

 References:
https://wpscan.com/vulnerability/b37b09c1-1b53-471c-9b10-7d2d05ae11f1

Copyright 2026, cxsecurity.com

 

Back to Top