Input validation vulnerability in WooCommerce 2.4.9

The WooCommerce plugin for WordPress, up to and including version 2.4.8, is vulnerable to a type of security issue called Cross-Site Scripting. This means that if an attacker with administrator privileges injects malicious code into certain pages, it could be executed when another user visits those pages. This is possible because the plugin does not properly check and sanitize inputs, or escape outputs.