CVE-2024-10563

CVE-2024-10563: WooCommerce Cart Count Shortcode < 1.1.0 - Contributor+ XSS

Vendor Unknown
Product WooCommerce Cart Count Shortcode
Published February 26, 2025
Last update February 26, 2025

CVSS base score

What the vulnerability does

01Description

The WooCommerce Cart Count Shortcode WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Key dates

02Disclosure timeline

February 26, 2025 CVE published
February 26, 2025 Record updated