CVE-2023-28988: Piwebsolution Add-To-Cart-Direct-Checkout-For-Woocommerce

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce plugin <= 2.1.48 versions.

Affected products

• Piwebsolution Add-To-Cart-Direct-Checkout-For-Woocommerce: up to and including 2.1.48

Published 2023-06-26. Last modified 2026-06-17.