Input validation vulnerability in Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin 2.2

The Pre Order Addon for WooCommerce is a plugin designed for WordPress websites that allows customers to place orders in advance or backorder products. However, there is a security vulnerability in versions up to 2.2. This vulnerability, known as Reflected Cross-Site Scripting, occurs when the plugin does not properly clean up the input and output of data. This means that attackers who are not logged in to the website can insert harmful code onto pages, which can be activated if a user falls for a trick, such as clicking on a link.