Vulnerabilities > CVE-2023-2256 - Unspecified vulnerability in Themeisle Product Addons & Fields for Woocommerce

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
themeisle

Summary

The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting.

Vulnerable Configurations

Part Description Count
Application
Themeisle
1