High · 7.1 CVE-2022-46858 EUVD-2022-49639GHSA-cf9f-rjx7-4x25

WordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS)

Published May 9, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Amin A.Rezapour Product Specifications for Woocommerce plugin <= 0.6.0 versions.

Vendor	Product	Affected	Fixed
Amin A.Rezapour	Product Specifications for Woocommerce	≤ 0.6.0	—