Product Addons & Fields for WooCommerce, CVE-2023-2256

CVE, Research URL: CVE-2023-2256
Home page URL: Security reports for Product Addons & Fields for WooCommerce
Application: Product Addons & Fields for WooCommerce
Published on: May 30, 2023
Research Description: The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting.
Affected versions: max 2.0.
Status: vulnerable

Product Addons &amp; Fields for WooCommerce, CVE-2023-2256