CVE-2025-32207

Summary

CVE-2025-32207 is a Cross-site Scripting (XSS) vulnerability affecting Ni WooCommerce Cost Of Goods. The flaw, which permits Stored XSS, is due to improper neutralization of user input during web page generation. This issue can be exploited by attackers to execute malicious scripts in the context of affected users, potentially leading to data theft or unauthorized actions. The vulnerability exists in versions of Ni WooCommerce Cost Of Goods from n/a through 3.2.8. It is crucial for users to apply the available patch or upgrade to a secure version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.