The woocommerce blocks while adding an a query assest is not properly escaped against an XSS attack.
This vulnerability affects the following application versions:
- WooCommerce 6.9.4
- WooCommerce 6.9.5
- WooCommerce 7.0.0
- WooCommerce 7.0.0-beta.2
- WooCommerce 7.0.0-beta.3
- WooCommerce 7.0.0-rc.1
- WooCommerce 7.0.0-rc.2
- WooCommerce 7.0.1
- WooCommerce 7.0.2
- WooCommerce 7.1.0
- WooCommerce 7.1.0-beta.1
- WooCommerce 7.1.0-beta.2
- WooCommerce 7.1.0-rc.1
- WooCommerce 7.1.0-rc.2
- WooCommerce 7.1.1
- WooCommerce 7.1.2
- WooCommerce 7.2.0
- WooCommerce 7.2.0-beta.1
- WooCommerce 7.2.0-beta.2
- WooCommerce 7.2.0-rc.1
- WooCommerce 7.2.0-rc.2
- WooCommerce 7.2.1
- WooCommerce 7.2.2
- WooCommerce 7.2.3
- WooCommerce 7.2.4
- WooCommerce 7.3.0
- WooCommerce 7.3.0-beta.1
- WooCommerce 7.3.0-beta.2
- WooCommerce 7.3.0-rc.1
- WooCommerce 7.3.0-rc.2
- WooCommerce 7.3.1
- WooCommerce 7.4.0
- WooCommerce 7.4.0-beta.1
- WooCommerce 7.4.0-beta.2
- WooCommerce 7.4.0-rc.1
- WooCommerce 7.4.0-rc.2
- WooCommerce 7.4.1
- WooCommerce 7.4.2
- WooCommerce 7.5.0
- WooCommerce 7.5.0-beta.1
- WooCommerce 7.5.0-beta.2
- WooCommerce 7.5.0-rc.1
- WooCommerce 7.5.1
- WooCommerce 7.5.2
- WooCommerce 7.6.0
- WooCommerce 7.6.0-beta.1
- WooCommerce 7.6.0-beta.2
- WooCommerce 7.6.0-rc.1
- WooCommerce 7.6.0-rc.2
- WooCommerce 7.6.0-rc.3
- WooCommerce 7.6.1
- WooCommerce 7.6.2
- WooCommerce 7.7.0
- WooCommerce 7.7.0-beta.1
- WooCommerce 7.7.0-beta.2
- WooCommerce 7.7.0-rc.1
- WooCommerce 7.7.1
- WooCommerce 7.7.2
- WooCommerce 7.7.3