CVE-2026-13718 — Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content

CVE-2026-13718

Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content PUBLISHED

Description (CNA)

The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaScript that executes when any user, including an administrator, views the product page.

Affected (CNA)

Vendor / product	Versions
Unknown / Tabs Responsive	affected 0 through 2.5

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/ff0da7b7-f415-466e-9f6e-4c559d2699a9/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.