← Database

CVE-2023-0948

MEDIUM CVSS: 6.1 Published: 2023-05-08 Modified: 2026-06-17

Description

The Japanized For WooCommerce WordPress plugin before 2.5.8 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

Affected Platforms

Artisanworkshop Japanized For Woocommerce

Weakness Type

CWE-79, CWE-79

References