Input validation vulnerability in WooCommerce – Store Exporter 1.7.5

The WooCommerce Store Exporter plugin for WordPress is vulnerable to a type of attack called Reflected Cross-Site Scripting. Reflected Cross-Site Scripting is when an attacker can inject malicious code into a website and have it executed in a victim’s browser. This vulnerability affects versions up to, and including, 1.7.5 of the plugin due to a lack of security measures that prevent malicious code from being injected. This means that an attacker can inject code simply by tricking a user into clicking a link.