Medium severity5.4NVD Advisory· Published Jan 11, 2024· Updated Apr 8, 2026
CVE-2023-6556
CVE-2023-6556
Description
The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency options in all versions up to, and including, 1.4.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:pluginus:fox_-_currency_switcher_professional_for_woocommerce:*:*:*:*:*:wordpress:*:*Range: <=1.4.1.5
- Range: <=1.4.1.5
Patches
Vulnerability mechanics
References
4- plugins.trac.wordpress.org/changesetnvdPatch
- www.wordfence.com/threat-intel/vulnerabilities/id/8cb37019-33f6-4f72-adfc-befbfbf69e47nvdThird Party Advisory
- plugins.trac.wordpress.org/browser/woocommerce-currency-switcher/trunk/classes/smart-designer.phpnvdIssue Tracking
- plugins.trac.wordpress.org/browser/woocommerce-currency-switcher/trunk/classes/smart-designer.phpnvdIssue Tracking
News mentions
0No linked articles in our index yet.