Description
The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Product Catalog Mode For WooCommerce | < 5.0.3 | 5.0.3 |
References
- https://wpscan.com/vulnerability/b37b09c1-1b53-471c-9b10-7d2d05ae11f1 exploit vdb-entry technical-description