TI-2026-83497 CVE-2026-119065 · GHSA-jj4c-mvqc-72v2
Stored cross-site scripting in Shipping Zones by Drawing for WooCommerce
Priority LOW 31
The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'szbd-picked' checkout parameter in versions up to, and including, 3.3.0 The szbd_checkout_field_upd…