Description
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| impleCode | eCommerce Product Catalog | ≤ 3.5.4 | — |
High · 7.1
CVE-2026-57360
EUVD-2026-41359GHSA-3mg3-686g-v244
WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability
Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack