eCommerce Product Catalog Plugin for WordPress, CVE-2021-24875

CVE, Research URL: CVE-2021-24875
Home page URL: Security reports for eCommerce Product Catalog Plugin for WordPress
Application: eCommerce Product Catalog Plugin for WordPress
Published on: Nov 24, 2021
Research Description: The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting issue
Affected versions: max 3.0.18.
Status: vulnerable