Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XootiX Side Cart Woocommerce (Ajax) plugin <= 2.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| XootiX | Side Cart Woocommerce (Ajax) | ≤ 2.2 | — |
Medium · 5.9
CVE-2023-28415
EUVD-2023-32111GHSA-jfw7-rc67-m9q7
WordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
Published Aug 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack