`CVE-2023-40007`

Medium (CVSS 5.5) Published

CT Commerce <= 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings

Affected Product: CT Commerce
Vendor: WordPress Plugin
Published: August 15, 2023
Status: Published

References

Vulnerability Details

CT Commerce <= 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings

CVE ID: CVE-2023-40007
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Published: August 16, 2023

This vulnerability was discovered through security research on WordPress plugins and responsibly disclosed.