CyberRota Analysis
AI-GeneratedThe Customer Reviews for WooCommerce plugin for WordPress prior to version 5.118.0 is vulnerable due to inadequate sanitization and escaping of customer review content, enabling unauthenticated users to execute Stored Cross-Site Scripting (XSS) attacks. This vulnerability could lead to the injection of malicious scripts, potentially compromising user data and site integrity. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of customer reviews received via one of its endpoints, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks.