Skip to content
Sign in
6.5 Medium

CVE-2025-22724 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MojofyWP Product…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MojofyWP Product Carousel For WooCommerce – WoorouSell allows Stored XSS.This issue affects Product Carousel For WooCommerce – WoorouSell: from n/a through 1.1.0.

Affected products and versions

Product Affected versions Fixed in
Product Carousel For WooCommerce – WoorouSell 1.1 earliest → 1.1.0 No fix stated

Other CVEs of Product Carousel For WooCommerce – WoorouSell

The 3 CVEs of Product Carousel For WooCommerce – WoorouSell →
CVE-2025-32180 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojofywp Product… 6.5 Medium CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE