A Cross-Site Scripting (XSS) vulnerability exists in the ithemelandco GIFTiT – Free Gifts for WooCommerce plugin, allowing improper neutralization of script-related HTML tags. This vulnerability affects versions up to 4.5 and can lead to code injection. The issue has a medium severity rating with a CVSS score of 5.3.