Upsell Order Bump Offer for WooCommerce vulnerabilities

The Upsell Order Bump Offer for WooCommerce plugin by WP Swings contains a Reflected XSS vulnerability due to improper neutralization of input during web page generation. The issue affects versions from n/a through 3.1.6.

Unauthenticated XSS vulnerability in Upsell Order Bump Offer for WooCommerce versions up to 3.1.5. An attacker can inject a malicious script that executes in the victim's browser.

The Upsell Order Bump Offer for WooCommerce plugin contains a Stored Cross-site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The issue affects versions up to and including 3.0.7.