CVE-2025-31598

Name of the Vulnerable Software and Affected Versions Quantity Dynamic Pricing & Bulk Discounts for WooCommerce versions 4.0.0 and earlier

Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows Stored XSS. This enables potential attackers to inject malicious scripts into the website.

Recommendations For versions 4.0.0 and earlier, update to a version later than 4.0.0 to resolve the issue. As a temporary workaround, consider restricting user input in web page generation to minimize the risk of exploitation.