Skip to content
Threat Feed
Subscribe

Product

ECommerce Product Catalog

1 brief RSS
high advisory

eCommerce Product Catalog: Reflected Cross-Site Scripting (CVE-2026-115596)

An unauthenticated reflected XSS vulnerability in the eCommerce Product Catalog WordPress plugin allows attackers to execute arbitrary JavaScript by manipulating the ic-search-keyword POST parameter.

eCommerce Product Catalog
2t 1c