CVE-2025-22307

Name of the Vulnerable Software and Affected Versions Product Table for WooCommerce versions n/a through 3.5.6

Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages.

Recommendations For versions n/a through 3.5.6, update to a version later than 3.5.6 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the Product Table for WooCommerce until a patch is available.