Know what’s on your machine,
and what’s in it.

CVEInsight.

Scan Browse Privacy Terms Disclaimer

© 2026 · Data from NVD

CVE-2026-57360 — High severity | CVEInsight

CVE-2026-57360High

Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions

Published Jul 2, 2026

What happened

Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions.

How an attack would work

Reachable from: Network
Attack difficulty: Low
Access needed first: None
Needs you to click: Required

Read more

https://patchstack.com/database/wordpress/plugin/ecommerce-produ…

7.1/ 10

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Official sources

National Vulnerability Database
CVE.org record

Not sure if this one affects you?

Check my computer