PT-2017-7740

Name of the Vulnerable Software and Affected Versions WooCommerce plugin versions prior to 2.6.9 Description A cross-site scripting XSS issue exists, allowing remote authenticated administrators to inject arbitrary web script or HTML. This is achieved by providing crafted tax-rate table values in...

CVE-2016-10112: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WooCommerce plugin before 2.6.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML by providing crafted tax-rate table values in CSV format...