{"id":"CVE-2026-123134","published":"2026-11-11T06:17:17.693","lastModified":"2026-11-11T06:17:17.693","description":"The Smoove abandoned cart trigger for WooCommerce WordPress plugin before 4.3.6 does not sanitise and escape abandoned-cart data submitted by visitors before outputting it in the admin dashboard, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/ad3a49ed-4740-4503-9c08-8c0fac5fc270/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}