Product
The European VAT Compliance Assistant for WooCommerce plugin is vulnerable to unauthenticated stored cross-site scripting via the CF-IPCountry HTTP header.