Cross site scripting

2022-08-2918:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

woocommerce

pdf plugin

0.001 Low

EPSS

Percentile

40.3%

JSON

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting.

CPENameOperatorVersion
woocommerce_pdf_invoices\\&_packing_slipsge2.14.0
woocommerce_pdf_invoices\\&_packing_slipslt3.0.1

CPE	Name	Operator	Version
	woocommerce_pdf_invoices\\&_packing_slips	ge	2.14.0
	woocommerce_pdf_invoices\\&_packing_slips	lt	3.0.1

References

wpscan.com/vulnerability/ae613148-85d8-47a0-952d-49c29584676f

0.001 Low

EPSS

Percentile

40.3%

JSON

Related for PRION:CVE-2022-2537