CVE-2023-7151 (published 2024-01-16T15:57:52.755Z)
The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected products: Vendor: Unknown
Product: Product Enquiry for WooCommerce
Versions: 0