CVE-2026-15794 - Grid/List View for WooCommerce <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position' Shortcode Attribute

<div class="space-y-6 font-sans select-text text-left"><div class="bg-[#1C1C1E] border border-white/5 rounded-lg p-5"><h3 class="text-xs font-bold text-white/50 mb-3 uppercase tracking-wider flex items-center gap-2"><i data-lucide="info" class="w-3.5 h-3.5 text-[#26A269]"></i>Zafiyet Ozet Bilgileri</h3><div class="grid grid-cols-1 md:grid-cols-2 gap-4 text-sm"><div class="flex items-center gap-2"><span class="text-white/40">Zafiyet Kodu:</span><strong class="text-[#FF5F56] font-mono">CVE-2026-15794</strong></div><div class="flex items-center gap-2"><span class="text-white/40">Siddet Derecesi:</span><span class="font-bold font-mono" style="color:#FFB800">MEDIUM</span></div><div class="flex items-center gap-2"><span class="text-white/40">CVSS Skoru:</span><span class="text-[#FFB800] font-bold font-mono">3.1</span></div><div class="flex items-center gap-2"><span class="text-white/40">Etkilenen Surumler:</span><span class="text-white/80 font-mono text-xs">up to</span></div><div class="flex items-center gap-2"><span class="text-white/40">Yayinlanma Tarihi:</span><span class="text-white/80 font-mono">27.07.2026</span></div></div></div><div><h3 class="text-xs font-bold text-white/50 mb-3 uppercase tracking-wider flex items-center gap-2"><i data-lucide="file-text" class="w-3.5 h-3.5 text-[#26A269]"></i>Zafiyet Detayı (Turkce)</h3><p class="text-white/70 leading-relaxed text-sm bg-[#1C1C1E]/30 p-4 border border-white/5 rounded-lg">WordPress için WooCommerce eklentisi için Izgara/Liste Görünümü, yetersiz giriş temizleme ve çıkış kaçışı nedeniyle 3.0.9&#039;a kadar (3.0.9 dahil) tüm sürümlerde &#039;konum&#039; Kısa Kod Özniteliği aracılığıyla Depolanan Siteler Arası Komut Dosyasına karşı savunmasızdır. Bu, katılımcı düzeyinde ve üzeri erişime sahip, kimliği doğrulanmış saldırganların keyfi web sitelerini enjekte etmesini mümkün kılar.</p></div><div><h3 class="text-xs font-bold text-white/50 mb-3 uppercase tracking-wider flex items-center gap-2"><i data-lucide="globe" class="w-3.5 h-3.5 text-[#26A269]"></i>Orijinal Aciklama (Ingilizce)</h3><p class="text-white/40 leading-relaxed text-xs bg-[#1C1C1E]/10 p-4 border border-white/5 rounded-lg italic">
    
    
      
        


  
    
      
        
          
          
            
              
                
              
              
                
              
            
            
              
                
              
              
                
              
            
          
          
            
              
              
              
            
          
          
             CVE ID, Product, Vendor ...
          
        
        
          
            
              
            
          
          
            Pricing
          
          
            
              
            
            
              
                
                  
                    Browse by Apps
                  
                  
                     View All Apps
                      
                  
                
              
              
                
                  
                    
                      
                      Splunk
                    
                  
                  
                    
                      
                      Slack
                    
                  
                  
                    
                      
                      Webhook
                    
                  
                  
                    
                      
                      Teams
                    
                  
                  
                    
                      
                      Jira
                    
                  
                  
                    
                      
                      Chrome
                    
                  
                
              
            
          
          
            
              
              
            
          
          
            
              
              
                API
              
            
          
          
              
   </p></div><div><h3 class="text-xs font-bold text-white/50 mb-3 uppercase tracking-wider flex items-center gap-2"><i data-lucide="external-link" class="w-3.5 h-3.5 text-[#26A269]"></i>Referanslar</h3><div class="bg-[#1C1C1E]/10 p-4 border border-white/5 rounded-lg"><a href="https://cvefeed.io/vuln/detail/CVE-2026-15794" target="_blank" class="text-[#3b82f6] hover:underline font-mono text-xs break-all">https://cvefeed.io/vuln/detail/CVE-2026-15794</a></div></div><div class="border-t border-white/5 pt-4 flex justify-between items-center text-xs"><span class="text-white/30">Otomatik olarak RSS feed'inden ice aktarildi.</span><a href="https://cvefeed.io/vuln/detail/CVE-2026-15794" target="_blank" class="inline-flex items-center gap-1.5 text-[#26A269] hover:underline font-bold transition-all">Kaynagi Goruntule <i data-lucide="external-link" class="w-3.5 h-3.5"></i></a></div></div>