Cross-site Scripting (XSS)

woocommerce is vulnerable to cross-site scripting XSS attacks. A malicious user can inject arbitrary web script through the various parameters of the product object that is executed when the products are added to the web cart...