Lucene search

K
cvelistWPScanCVELIST:CVE-2022-2092
HistoryJul 11, 2022 - 12:57 p.m.

CVE-2022-2092 WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting

2022-07-1112:57:25
CWE-79
WPScan
www.cve.org
3
woocommerce
pdf invoices
packing slips
wordpress
plugin
reflected cross-site scripting
cve-2022-2092

EPSS

0.001

Percentile

40.2%

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn’t escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.

CNA Affected

[
  {
    "product": "WooCommerce PDF Invoices & Packing Slips",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.16.0",
        "status": "affected",
        "version": "2.16.0",
        "versionType": "custom"
      }
    ]
  }
]

EPSS

0.001

Percentile

40.2%