Cpe:2.3:a:implecode:ecommerce_product_catalog:*:*:*:*:*:wordpress:*:*

An unauthenticated reflected XSS vulnerability in the eCommerce Product Catalog WordPress plugin allows attackers to execute arbitrary JavaScript by manipulating the ic-search-keyword POST parameter.