Description
The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaScript that executes when any user, including an administrator, views the product page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Tabs Responsive | ≤ 2.5 | — |
References
- https://wpscan.com/vulnerability/ff0da7b7-f415-466e-9f6e-4c559d2699a9/ exploit vdb-entry technical-description