CVE-2023-2256

CVE-2023-2256: Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting

Vendor Unknown
Product Product Addons & Fields for WooCommerce
Published May 30, 2023
Last update January 10, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting.

Key dates

02Disclosure timeline

May 30, 2023 CVE published
January 10, 2025 Record updated