Medium · 6.5 CVE-2023-24408 EUVD-2023-28464GHSA-9w8q-wmx2-9qw7

WordPress Ecwid Shopping Cart Plugin <= 6.11.4 is vulnerable to Cross Site Scripting (XSS)

Published May 8, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin <= 6.11.4 versions.

Vendor	Product	Affected	Fixed
Ecwid Ecommerce	Ecwid Ecommerce Shopping Cart	≤ 6.11.4	—