WordPress Flexible Shipping plugin <= 4.11.8 - XSS vulnerability

[Kailash]

WordPress Flexible Shipping plugin <= 4.11.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Plugin name: Table Rate Shipping Method for WooCommerce by Flexible Shipping
Vulnerable versions: <= 4.11.8
Fixed in: 4.11.9
CVE ID: N/A
Classification: Cross Site Scripting (XSS)
Publicly disclosed: 2022-06-14

Vulnerability Details

Reflected Cross-Site Scripting (XSS) vulnerability discovered by WPScanTeam in WordPress Flexible Shipping plugin versions <= 4.11.8.

Solution

Update the WordPress Flexible Shipping plugin to the latest available version (at least 4.11.9).

Plugin Link: https://wordpress.org/plugins/flexible-shipping/