Checkout Field Editor For Woocommerce 8211 Checkout Manager
Monthly
Stored cross-site scripting (XSS) in the WooCommerce Checkout Manager plugin allows authenticated shop managers to inject arbitrary JavaScript into checkout field settings. When another administrator views the affected configuration, the malicious script executes in their browser session, potentially leading to session hijacking or unauthorized actions. No active exploitation has been reported, and the vulnerability is not listed as known exploited by CISA.
Stored cross-site scripting (XSS) in the WooCommerce Checkout Manager plugin allows authenticated shop managers to inject arbitrary JavaScript into checkout field settings. When another administrator views the affected configuration, the malicious script executes in their browser session, potentially leading to session hijacking or unauthorized actions. No active exploitation has been reported, and the vulnerability is not listed as known exploited by CISA.