CVE-2024-44061

Name of the Vulnerable Software and Affected Versions EU/UK VAT Manager for WooCommerce versions prior to 2.12.14

Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows Cross-Site Scripting (XSS). This problem enables attackers to use malicious scripts on a website.

Recommendations For versions prior to 2.12.14, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to sensitive areas of the website to minimize the risk of exploitation.