CVE-2023-0537

CVE-2023-0537: Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS

Vendor Unknown
Product Product Slider For WooCommerce Lite
Published May 8, 2023
Last update January 29, 2025

CVSS base score

—

What the vulnerability does

01Description

The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Key dates

02Disclosure timeline

May 8, 2023 CVE published
January 29, 2025 Record updated