CVE-2023-5348

Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update

published December 18, 2023

CVSS
—
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00531 · 44.0th percentile
Published
2023-12-18T20:07Z
EPSS history
Timeline
  • 18 DEC 20:07Z
    Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update
    cvelistv5