{"id":"CVE-2026-105972","title":"WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute","summary":"The Menu Cart for WooCommerce WordPress plugin before 3.2.1 does not sanitise and escape cart item variation data before outputting it in its cart slide-out, allowing unauthenticated users to store a Cross-Site Scripting payload that can…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"adp","cwe":["CWE-79"],"product":"Menu Cart for WooCommerce","affected":["menu_cart_for_woocommerce < 3.2.1"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-28T17:48:58.718633Z"},"published":"2026-10-28","updated":"2026-10-28","sourceUpdated":"2026-10-28T17:58:08.920Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105972","references":[{"url":"https://wpscan.com/vulnerability/579936d7-183f-4b25-acfd-b15f43eb573c/"}],"tags":["cve.org"],"epss":0.00291,"epssPercentile":0.21808,"ingestedAt":"2026-10-28T07:06:27.151Z","slug":"CVE-2026-105972","body":"## Overview\n\nThe Menu Cart for WooCommerce WordPress plugin before 3.2.1 does not sanitise and escape cart item variation data before outputting it in its cart slide-out, allowing unauthenticated users to store a Cross-Site Scripting payload that can be delivered to and executed in the session of another user, including a logged-in administrator.\n\n## Affected\n\n- `menu_cart_for_woocommerce < 3.2.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":230780,"id":"CVE-2026-105972","ts":1793211383273,"field":"cvss","old":null,"new":"7.5"},{"seq":230779,"id":"CVE-2026-105972","ts":1793211383273,"field":"severity","old":"none","new":"high"}]}