CVE-2022-0426: Improper Neutralization of Input During Web Page Generation

The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the wooseacategoriesdropdown AJAX action available to any authenticated user, leading to a Reflected Cross-Site Scripting...

PT-2022-13175

Name of the Vulnerable Software and Affected Versions Product Feed PRO for WooCommerce WordPress plugin versions prior to 11.2.3 Description The issue concerns a Reflected Cross-Site Scripting problem. It arises because the rowCount parameter is not properly escaped before being outputted in an...

WordPress plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Product Feed PRO for WooCommerce Plugin before 11.2.3...