The YITH WooCommerce Wishlist plugin for WordPress has a security issue that allows attackers to inject harmful scripts into web pages. This can happen because the plugin does not properly clean and protect the user input. As a result, attackers with certain levels of access can insert scripts that will run when a user opens a page containing them.