A vulnerability was found in Admin and Customer Messages After Order for WooCommerce Plugin up to 13.2 on WordPress. It has been classified as problematic. This affects an unknown part of the component File Upload. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2024-13355. It is possible to initiate the attack remotely. There is no exploit available.