Input validation vulnerability in Product Code for WooCommerce 1.4.4

The Product Code for WooCommerce plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting in versions 1.4.4 and earlier. This kind of attack can happen when someone with access to the website, such as a contributor, injects malicious web scripts into pages. When a user visits an affected page, these scripts will be automatically executed, which can be used to do things like steal personal information. To prevent this type of attack, websites should make sure to sanitize input and escape output.