CVE-2024-44061

The EU/UK VAT Manager for WooCommerce plugin through version 2.12.14 contains a reflected cross-site scripting vulnerability stemming from inadequate handling of user input and lack of proper output encoding. An unauthenticated attacker could exploit this flaw by crafting a malicious link that, when clicked by a victim, would execute arbitrary JavaScript code within the context of the affected page. The vulnerability requires social engineering to trick users into interacting with the malicious link.

Based on public CVE data (MITRE/NVD).