Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Composite Products plugin <= 8.7.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WooCommerce | Composite Products | ≤ 8.7.5 | — |
High · 7.1
CVE-2023-32801
EUVD-2023-37022GHSA-p38w-hpcm-7jgw
WordPress WooCommerce Composite Products Plugin <= 8.7.5 is vulnerable to Cross Site Scripting (XSS)
Published Aug 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack