cleantalk
Vulnerabilities and Security Researches

HUSKY – Products Filter for WooCommerce Professional, CVE-2020-37174

CVE, Research URL

CVE-2020-37174

Published on
May 13, 2026
Research Description
WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS payloads in design tab textfields. Attackers can inject JavaScript code through fields like 'Text for block toggle' and 'Custom front css styles' that executes on frontend pages when saved, affecting all site visitors.
Affected versions
max 1.2.3.
Status
vulnerable