CVE-2023-5140

Name of the Vulnerable Software and Affected Versions Bonus for Woo WordPress plugin versions prior to 5.8.3

Description The issue is related to Reflected Cross-Site Scripting, which occurs because some parameters are not properly sanitised and escaped before being outputted back in pages. This could be exploited against high-privilege users, such as administrators.

Recommendations For versions prior to 5.8.3, update to version 5.8.3 or later to resolve the issue.