Input validation vulnerability in Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later 1.2.25

The Wishlist plugin for WordPress, called the Flexible Wishlist for WooCommerce, has a security issue that can affect all versions up to 1.2.25. This issue is known as Stored Cross-Site Scripting and it happens when the ‘wishlist_name’ parameter is used without proper security measures. This means that people who are not logged in to the website can potentially add harmful web scripts to pages, which will then be executed whenever someone visits that page.