CVE-2021-24300

6.1 mediumEPSS 11%

Medium (6.1) in pickplugins product slider for woocommerce. EPSS 11% chance of exploitation in the next 30 days.

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-05-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pickplugins:product_slider_for_woocommerce

References

https://wpscan.com/vulnerability/5fbbc7ad-3f1a-48a1-b2eb-e57f153eb837
https://wpscan.com/vulnerability/5fbbc7ad-3f1a-48a1-b2eb-e57f153eb837

Check your stack JSON