A Cross-Site Scripting (XSS) vulnerability exists in Rymera Web Co's Product Feed PRO for WooCommerce plugin, allowing improper neutralization of script-related HTML tags. This flaw enables code injection via crafted input. The vulnerability affects versions up to and including 13.5.8. The CVSS score is 5.3, indicating a medium severity level with network attack vector and no user interaction required.