CVE-2023-6556

CVE-2023-6556 describes a Stored Cross‑Site Scripting vulnerability in the FOX – Currency Switcher Professional for WooCommerce WordPress plugin. The flaw exists in all versions up to 1.4.1.5 due to insufficient input sanitization and output escaping in currency options, allowing authenticated us...