CVE-2021-25062

CVE-2021-25062 affects the Orders Tracking for WooCommerce WordPress plugin prior to 1.1.10. The vulnerability stems from insufficient sanitisation/escaping of the file_url in admin-page output, enabling Reflected Cross-Site Scripting. Impact is client-side script execution within the admin conte...