CVE-2023-0537

CVE-2023-0537: Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS

Vendor Unknown
Product Product Slider For WooCommerce Lite
Published May 8, 2023
Last update January 29, 2025

CVSS base score

What the vulnerability does

01Description

The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Key dates

02Disclosure timeline

May 8, 2023 CVE published
January 29, 2025 Record updated