Vulnerability Details CVE-2022-4329
The Product list Widget for Woocommerce WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users (such as high privilege one like admin).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.1%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2022-4329
-
cpe:2.3:a:product_list_widget_for_woocommerce_project:product_list_widget_for_woocommerce:*