Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Box Office plugin <= 1.1.50 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WooCommerce | WooCommerce Box Office | ≤ 1.1.50 | — |
Medium · 6.5
CVE-2023-34004
EUVD-2023-38128GHSA-j55g-jx4w-2w3r
WordPress WooCommerce Box Office Plugin <= 1.1.50 is vulnerable to Cross Site Scripting (XSS)
Published Aug 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack