Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-29423 EUVD-2023-32992GHSA-p2g4-r9v4-6qrh

WordPress Cancel order request WooCommerce Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

Published Jun 26, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: PI Websolution Product: Cancel order request / Return order / Repeat Order / Reorder for WooCommerce Category: Web / CMS

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin <= 1.3.2 versions.

Affected products

VendorProductAffectedFixed
PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce ≤ 1.3.2 —

References