Cross site scripting

2023-11-2218:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

web page generation

input neutralization

vulnerability

plugin

nvd

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in AazzTech WooCommerce Product Carousel Slider plugin <= 3.3.5 versions.

CPENameOperatorVersion
woocommerce_product_carousel_sliderle3.3.5

CPE	Name	Operator	Version
	woocommerce_product_carousel_slider	le	3.3.5

References

patchstack.com/database/vulnerability/product-carousel-slider-for-woocommerce/wordpress-woocommerce-product-carousel-slider-plugin-3-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve