Andrea

**Name of the Vulnerable Software and Affected Versions** WooCommerce Green Wallet Gateway WordPress plugin versions prior to 1.0.2 **Description** The issue is related to a Reflected Cross-Site Scripting vulnerability. It occurs because the `error envision` query parameter is not properly escaped before being outputted to the page. This allows for potential malicious script injection. **Recommendations** For versions prior to 1.0.2, update to version 1.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the page where the `error envision` query parameter is used until a patch is applied. Avoid using the `error envision` query parameter in affected pages until the issue is resolved.