5.9
Medium
CVE-2023-25049 Auth
Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.4 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| eCommerce Product Catalog Plugin for WordPress 3.3 | earliest → 3.3.4 | No fix stated |
References
- patchstack.com patchstack.com
Timeline
- Published
- Last modified
Other CVEs of eCommerce Product Catalog Plugin for WordPress
The 7 CVEs of eCommerce Product Catalog Plugin for WordPress →
CVE-2024-12771
The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in…
8.8
High
CVE-2023-51688
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin…
5.3
Medium
CVE-2023-47839
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode…
6.5
Medium
CVE-2021-4392
The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in…
4.3
Medium