A Cross-Site Scripting (XSS) vulnerability exists in PluginUs.Net Active Products Tables for WooCommerce through version 2.1.6. The flaw involves improper neutralization of script-related HTML tags, allowing code injection. This vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity. No known exploits are reported in the wild, and no patch or remediation information is currently available.