← All advisories

High severity7.1NVD Advisory· Published Aug 30, 2023· Updated Jun 17, 2026

CVE-2023-33317

CVE-2023-33317

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 versions.

Affected products

3

WooCommerce/Returns And Warranty Requests2 versions
cpe:2.3:a:woocommerce:returns_and_warranty_requests:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:woocommerce:returns_and_warranty_requests:*:*:*:*:*:wordpress:*:*range: <=2.1.6
- (no CPE)range: n/a
WordPress/WooCommerce Returns and Warranty Requestsllm-create
Range: <=2.1.6

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/woocommerce-warranty/wordpress-woocommerce-warranty-requests-plugin-2-1-6-reflected-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.