CVE-2026-66697

15th percentile - higher than 15% of all known CVEs

The Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin version 2.10.0 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject a malicious script that executes in the victim's browser without requiring authentication.

The risk includes user session theft, account takeover, displaying fake content, or redirecting to malicious sites. This could lead to compromise of user data confidentiality.

It is recommended to update the Colissimo Officiel plugin to a version newer than 2.10.0. Also, apply input filtering and sanitization mechanisms.