CVE-2023-5348

CVE-2023-5348: Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update

Vendor Unknown
Product Product Catalog Mode For WooCommerce
Published December 18, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.

Key dates

02Disclosure timeline

December 18, 2023 CVE published
August 2, 2024 Record updated