Lucene search

eCommerce Product Catalog < 3.3.5 - Admin+ Stored XSS

🗓️ 06 Feb 2023 00:00:00Reported by wpvulndbType

eCommerce Product Catalog < 3.3.5 - Admin+ Stored XSS. Plugin settings not sanitized, enabling Stored XSS attacks by high privilege users. Unfiltered_html capability ineffective in multisite setup

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2023-25049	7 Apr 202312:15	–	nvd
Cvelist	CVE-2023-25049 WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)	7 Apr 202311:12	–	cvelist
Prion	Cross site scripting	7 Apr 202312:15	–	prion
RedhatCVE	CVE-2023-25049	23 May 202505:28	–	redhatcve
Vulnrichment	CVE-2023-25049 WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)	7 Apr 202311:12	–	vulnrichment
CVE	CVE-2023-25049	7 Apr 202312:15	–	cve
Patchstack	WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)	6 Feb 202300:00	–	patchstack
Wordfence Blog	Wordfence Intelligence CE Weekly Vulnerability Report (Feb 6, 2023 to Feb 12, 2023)	16 Feb 202315:21	–	wordfence

Vulners

Node

implecode ecommerce_product_catalogRange<3.3.5wordpress

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Feb 2023 00:00Current

4.8Medium risk

Vulners AI Score4.8

EPSS0.00063