TI-2025-04748 CVE-2025-5285 · GHSA-jq9j-w629-m6mr
Cross-site scripting in spiderwares Product Subtitle for WooCommerce
Priority LOW 28
The Product Subtitle for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmlTag’ parameter in all versions up to, and including, 1.3.9 due to insufficient input sanitization and ou…