Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wordpress:the_eu_vat_assistant_for_woocommerce:*:*:*:*:*:*:*:*

1 brief RSS
medium advisory

Stored XSS in The EU VAT Assistant for WooCommerce Plugin

An unauthenticated Stored Cross-Site Scripting vulnerability in The EU VAT Assistant for WooCommerce plugin (<= 2.1.30.260413) allows attackers to inject malicious scripts that execute in the administrator's context, potentially leading to account takeover.

The EU VAT Assistant for WooCommerce xss wordpress web-vulnerability cve-2026-103899
2t 1c