CVE-2025-1405 | implecode Product Catalog Simple Plugin up to 1.7.11 on WordPress Shortcode show_products cross site scripting

CVE-2025-1405 | implecode Product Catalog Simple Plugin up to 1.7.11 on WordPress Shortcode show_products cross site scripting

A vulnerability was found in implecode Product Catalog Simple Plugin up to 1.7.11 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function show_products of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-1405. The attack can be launched remotely. There is no exploit available.