CPE
The Checkout Files Upload for WooCommerce plugin (versions up to and including 2.4.0) contains an improper neutralization of input vulnerability, resulting in Stored Cross-Site Scripting (XSS).