Input validation vulnerability in Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons 2.6.5

The plugin “Discount Rules for WooCommerce” has a security vulnerability called “Reflected Cross-Site Scripting”. This means that an attacker can inject harmful code into a website if they can trick the website administrator into clicking on a link. This vulnerability exists in all versions of the plugin up to version 2.6.5. It is only a risk if the “Leave a Review” notice is present, which appears after 100 orders and disappears when the user dismisses it.