CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0492

The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.4%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2023-0492

Gsplugins » Gs Products Slider » Version: 1.1

cpe:2.3:a:gsplugins:gs_products_slider:1.1
Gsplugins » Gs Products Slider » Version: 1.2

cpe:2.3:a:gsplugins:gs_products_slider:1.2
Gsplugins » Gs Products Slider » Version: 1.3

cpe:2.3:a:gsplugins:gs_products_slider:1.3
Gsplugins » Gs Products Slider » Version: 1.4

cpe:2.3:a:gsplugins:gs_products_slider:1.4
Gsplugins » Gs Products Slider » Version: 1.5

cpe:2.3:a:gsplugins:gs_products_slider:1.5
Gsplugins » Gs Products Slider » Version: 1.5.1

cpe:2.3:a:gsplugins:gs_products_slider:1.5.1
Gsplugins » Gs Products Slider » Version: 1.5.2

cpe:2.3:a:gsplugins:gs_products_slider:1.5.2
Gsplugins » Gs Products Slider » Version: 1.5.3

cpe:2.3:a:gsplugins:gs_products_slider:1.5.3
Gsplugins » Gs Products Slider » Version: 1.5.4

cpe:2.3:a:gsplugins:gs_products_slider:1.5.4
Gsplugins » Gs Products Slider » Version: 1.5.5

cpe:2.3:a:gsplugins:gs_products_slider:1.5.5
Gsplugins » Gs Products Slider » Version: 1.5.6

cpe:2.3:a:gsplugins:gs_products_slider:1.5.6
Gsplugins » Gs Products Slider » Version: 1.5.7

cpe:2.3:a:gsplugins:gs_products_slider:1.5.7
Gsplugins » Gs Products Slider » Version: 1.5.8

cpe:2.3:a:gsplugins:gs_products_slider:1.5.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0492

Products

Pricing

Contact Us