Vulnerability · Published May 13, 2026 · Assigned by VulnCheck

CVE-2020-37174WOOF / Products Filter Professional for WooCommerce 1.2.3 Persistent XSS

Medium 5.5

In plain English

A medium-severity cross-site scripting in Products Filter Professional for WooCommerce from HUSKY. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.3%top 82.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS payloads in design tab textfields. Attackers can inject JavaScript code through fields like 'Text for block toggle' and 'Custom front css styles' that executes on frontend pages when saved, affecting all site visitors.

Affected products (as reported)

Vendor	Product	Versions
HUSKY	Products Filter Professional for WooCommerce	1.2.3

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

References

ExploitDB-48088 exploit
Official Product Homepage product
Product Reference product
VulnCheck Advisory: WOOF Products Filter for WooCommerce 1.2.3 Persistent XSS third-party-advisory