Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Irina Sokolovskaya Goods Catalog plugin <= 2.4.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Irina Sokolovskaya | Goods Catalog | ≤ 2.4.1 | — |
Medium · 6.5
CVE-2023-41687
EUVD-2023-46179GHSA-qprp-6g98-xq5v
WordPress Goods Catalog Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)
Published Sep 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack