Nazar Tikhoniuk

Hi @pereirinha

This is fixed.

Thank you!

Still appears to be an issue – plugin version 4.0.2

Info:?In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data.

File:?/wp-content/plugins/stream/ui/lib/select2/js/select2.min.js

Hi!
You can temporarily resolve this problem by editing file “wp-content/plugins/yith-woocommerce-wishlist/includes/class.yith-wcwl.php” line 1110.

Change this:
public function get_wishlist_url( $action = 'view' ) {

To this:
public function get_wishlist_url( $action = '' ) {

Hope this helps.