TI-2026-02438 CVE-2026-2838 · GHSA-v626-g2r5-w2g5
Cross-site scripting in idealwebdesignlk Whole Enquiry Cart for WooCommerce
Priority LOW 20
The Whole Enquiry Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘woowhole_success_msg’ parameter in all versions up to, and including, 1.2.1 due to insufficient input sani…