WordPress Advanced Product Labels for WooCommerce plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress Advanced Product Labels for WooCommerce plugin version 1.2.3.7 has a cross-site scripting vulnerability. The vulnerability stems from the plugin’s failure to clean up and escape the tax_color_set_type parameter before exporting it back to the berocket_apl_color_listener AJAX operation, which can be exploited by attackers to cause reflection cross-site scripting.