Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-13718

Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content

Description

The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaScript that executes when any user, including an administrator, views the product page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Tabs Responsive

Default version status: unknown

  • 0 to ≤ 2.5affected

References