CVE Database /
CVE-2021-47924
CVE · Medium
CVE-2021-47924 — Ultimate Product Catalog [ultimate-product-catalogue] <= 5.8.2 (unfixed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-47924
|
Ultimate Product Catalog [ultimate-product-catalogue] <= 5.8.2 (unfixed) |
— |
Medium
6.4
|
< 5.8.2
|
5.8.2 |
2026-05-10 |
—
|
CVE-2021-47924
The Ultimate Product Catalog plugin through version 5.8.2 is vulnerable to stored cross-site scripting via the price parameter. A logged-in attacker can craft a POST request to post.php containing malicious JavaScript in the price field, which then executes in the browsers of users who view the affected product listing. This vulnerability remains unpatched in all current releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings