CVE-2023-5348 (published 2023-12-18T20:07:59.959Z)
The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.
Affected products: Vendor: Unknown
Product: Product Catalog Mode For WooCommerce
Versions: 0