CVE-2017-12200: Etoilewebdesign Ultimate Product Catalog

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component.

Affected products

• Etoilewebdesign Ultimate Product Catalog: version 4.2.11 only

Published 2017-08-02. Last modified 2026-06-17.