‘Featured Category’ and ‘Featured Product’ were not properly escaped against XSS.
This vulnerability affects the following application versions:
- WooCommerce 3.7.0
- WooCommerce 3.7.0-beta.1
- WooCommerce 3.7.0-rc.1
- WooCommerce 3.7.0-rc.2
- WooCommerce 3.7.1
- WooCommerce 3.7.2
- WooCommerce 3.7.3
- WooCommerce 3.8.0
- WooCommerce 3.8.0-beta.1
- WooCommerce 3.8.0-rc.1
- WooCommerce 3.8.0-rc.2
- WooCommerce 3.8.1
- WooCommerce 3.8.2
- WooCommerce 3.8.3
- WooCommerce 3.9.0
- WooCommerce 3.9.0-beta.1
- WooCommerce 3.9.0-beta.2
- WooCommerce 3.9.0-rc.1
- WooCommerce 3.9.0-rc.2
- WooCommerce 3.9.0-rc.3
- WooCommerce 3.9.0-rc.4
- WooCommerce 3.9.1
- WooCommerce 3.9.2
- WooCommerce 4.0.0-beta.1
- WooCommerce 4.0.0-rc.1