Input validation vulnerability in Robokassa payment gateway for Woocommerce 1.4.5

The Robokassa payment gateway plugin for Woocommerce in WordPress is vulnerable to a type of cyber attack called “Stored Cross-Site Scripting”. This type of attack is possible in versions of the plugin up to and including version 1.4.5 because of inadequate security measures. This vulnerability means that people who have administrator-level permissions can add malicious code to web pages that will run when someone visits the page. This vulnerability only affects multi-site installations and installations where a specific security measure has been disabled.