CVE-2023-0492

CVE-2023-0492: GS Products Slider for WooCommerce < 1.5.9 - Contributor+ Stored XSS

Vendor Unknown
Product GS Products Slider for WooCommerce
Published February 21, 2023
Last update March 14, 2025

CVSS base score

What the vulnerability does

01Description

The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Key dates

02Disclosure timeline

February 21, 2023 CVE published
March 14, 2025 Record updated