CVE-2023-0492

CVE-2023-0492: GS Products Slider for WooCommerce < 1.5.9 - Contributor+ Stored XSS

Vendor Unknown
Product GS Products Slider for WooCommerce
Published February 21, 2023
Last update March 14, 2025

CVSS base score

—

What the vulnerability does

01Description

The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Key dates

02Disclosure timeline

February 21, 2023 CVE published
March 14, 2025 Record updated