CVE-2026-0552

CVE-2026-0552 affects the WordPress plugin Simple Shopping Cart (versions up to and including 5.2.4). The issue is a Stored Cross-Site Scripting vulnerability via the plugin’s 'wpsc_display_product' shortcode , caused by insufficient input sanitization and output escaping on user-supplied attribu...