The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.…
CVSS 3.1HIGH 7.2·Network·No auth·No interaction·EPSS 0.01353·Published 2023-06-22·Fixed in 5.2.0CWE-79