A Cross Site Scripting (XSS) vulnerability exists in WooCommerce Designer Pro versions up to and including 1.9.34. This vulnerability allows an attacker with subscriber-level privileges to inject malicious scripts that can affect confidentiality, integrity, and availability. The vulnerability is identified as CWE-79 and has a moderate severity rating.