CVE-2022-4791

CVE-2022-4791: Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcode

Vendor Unknown
Product Product Slider and Carousel with Category for WooCommerce
Published February 21, 2023
Last update March 14, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Product Slider and Carousel with Category for WooCommerce WordPress plugin before 2.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Key dates

02Disclosure timeline

February 21, 2023 CVE published
March 14, 2025 Record updated