Vulnerability — CVE-2023-5348

CVE-2023-5348

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-5348
Description:: The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.
Last updated date:: 12/21/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 12/21/2023
Reference url to background: https://wpscan.com/vulnerability/b37b09c1-1b53-471c-9b10-7d2d05ae11f1