CVE-2023-0068

The Product GTIN EAN, UPC, ISBN for WooCommerce WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2023-0068

The CVE-2023-0068 entry concerns the WordPress plugin Product GTIN (EAN, UPC, ISBN) for WooCommerce. The vulnerability affects versions up to 1.1.1, caused by failure to validate and escape certain shortcode attributes before they are echoed in a page or post, enabling Stored XSS for users with t...

CVE-2023-0068 Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS

The Product GTIN EAN, UPC, ISBN for WooCommerce WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2023-0068 Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS

The Product GTIN EAN, UPC, ISBN for WooCommerce WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

WordPress Product GTIN (EAN, UPC, ISBN) for WooCommerce Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Product GTIN EAN, UPC, ISBN for WooCommerce Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0068 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID f70750e5a4e8...