TM WooCommerce Compare & Wishlist <= 1.1.7 - Contributor+ Stored Cross-Site Scripting

Description The plugin does not sufficiently sanitize and escape user-supplied attributes in the 'tmwoowishlisttable' shortcode. This leads to a Stored Cross-Site Scripting vulnerability, enabling authenticated users with contributor-level or higher permissions to inject arbitrary web scripts...

WordPress TM WooCommerce Compare & Wishlist Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software TM WooCommerce Compare & Wishlist Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5230 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 76b4f5683bff Credits Lana Cod...