UpHeron
All vulnerabilities

WordPress plugins

CVE-2023-47777

WooCommerce: Cross-site Scripting

Severity
Medium 6.5
Published
15 Nov 2023
Added to UpHeron
17 Oct 2026
Fixed in
8.2.0
Also known as
WPV-1edabdb85269
Sources
WPVulnerability

Affected software

SoftwareAffected versions
WooCommerceWordPress plugins · wp-plugin:woocommerce
  • Every version before 8.2.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-47777
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/detail/woocommerce-811-woocommerce-blocks-1111-authenticated-contributor-stored-cross-site-scripting-via-featured-image-alt-attribute