CVE-2023-0942

The CVE-2023-0942 issue affects the WordPress plugin “Japanized For WooCommerce” (versions up to 2.5.4). It is a Reflected Cross-Site Scripting vulnerability caused by insufficient input sanitization and output escaping on the tab parameter, allowing unauthenticated attackers to inject scripts th...

CVE-2023-0948

CVE-2023-0948 affects the WordPress plugin “Japanized For WooCommerce” (WooCommerce Japan) versions prior to 2.5.8. The vulnerability is a Reflected Cross-Site Scripting (XSS) due to insufficient escaping of generated URLs output in attributes, enabling an attacker to inject script via the tab pa...