Threats tagged 'ghsa-rc68-5g4f-j42f'

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Local Delivery Drivers for WooCommerce versions up to and including 3.0.0. This vulnerability allows an attacker to inject malicious scripts that can execute in the context of other users. It has a CVSS 3.1 base score of 7.1, indicating high severity with network attack vector, low attack complexity, no privileges required, and requires user interaction. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No patch or remediation information is currently provided.