An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Colissimo Officiel : Méthodes de livraison pour WooCommerce versions up to 2.10.0. This vulnerability allows an attacker to execute arbitrary scripts in the context of the affected application without requiring authentication.