7.1
High
CVE-2023-37894 Unauth
Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RadiusTheme Variation Images Gallery for WooCommerce plugin <= 2.3.3 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Variation Images Gallery for WooCommerce 2.3 | earliest → 2.3.3 | No fix stated |