XSS error in shop

I’m getting a Sitelock XSS error: URL:https://www.mysite.com/shop/?add-to-cart=274&product_order=desc&product_orderby=rating
Description:add-to-cart,product_order,product_orderby

I’ve applied all Avada patches to the site, searched documentation, current versions of WooCommerce and Avada

Sitelock is saying this is a vulnerability to script — as was the cart issue — and will remove my secure standing.

https://wordpress.org/plugins/woocommerce/