Product Catalog Mode For WooCommerce, CVE-2023-5348

CVE, Research URL: CVE-2023-5348
Home page URL: Security reports for Product Catalog Mode For WooCommerce
Application: Product Catalog Mode For WooCommerce
Published on: Dec 19, 2023
Research Description: The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or escape settings values, leading to stored XSS by unauthenticated users.
Affected versions: max 5.0.3.
Status: vulnerable