← All advisories

High severity7.1NVD Advisory· Published Jun 22, 2023· Updated Jun 17, 2026

CVE-2023-35918

CVE-2023-35918

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Bulk Stock Management plugin <= 2.2.33 versions.

Affected products

3

WooCommerce/Bulk Stock Management2 versions
cpe:2.3:a:woocommerce:bulk_stock_management:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:woocommerce:bulk_stock_management:*:*:*:*:*:wordpress:*:*range: <=2.2.33
- (no CPE)range: n/a
WordPress/WooCommerce Bulk Stock Managementllm-fuzzy
Range: <=2.2.33

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/woocommerce-bulk-stock-management/wordpress-woocommerce-bulk-stock-management-plugin-2-2-33-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.