CVE-2023-0068

CVE-2023-0068: Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS

Vendor Unknown
Product Product GTIN (EAN, UPC, ISBN) for WooCommerce
Published March 6, 2023
Last update March 6, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Product GTIN (EAN, UPC, ISBN) for WooCommerce WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Key dates

02Disclosure timeline

March 6, 2023 CVE published
March 6, 2025 Record updated