Etoilewebdesign Ultimate Product Catalogue vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Etoilewebdesign Ultimate Product Catalogue: 1 record(s), with affected versions and fixes.

CVE-2021-47924 Medium · 6.4 CWE-79 May 10, 2026

WordPress Plugin Ultimate Product Catalogue 5.8.2 Stored XSS via price

Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary code when the product is viewed.