Product Enquiry for WooCommerce, CVE-2023-7151

CVE, Research URL: CVE-2023-7151
Home page URL: Security reports for Product Enquiry for WooCommerce
Application: Product Enquiry for WooCommerce
Published on: Jan 16, 2024
Research Description: The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected versions: max 3.2.
Status: vulnerable