Lucene search
+L

156 matches found

NVD
NVD
•added 2022/01/03 1:15 p.m.•36 views

CVE-2021-24991

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard...

4.8CVSS0.01188EPSS
SaveExploits3References1
OSV
OSV
•added 2022/01/03 1:15 p.m.•33 views

CVE-2021-24991

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard...

4.8CVSS5.8AI score0.01188EPSS
SaveExploits3References1
CVE
CVE
•added 2022/01/03 12:49 p.m.•107 views

CVE-2021-24991

The CVE-2021-24991 entry affects the WordPress plugin WooCommerce PDF Invoices & Packing Slips (versions before 2.10.5). Several connected sources confirm a reflected XSS vulnerability: the plugin fails to escape tab and section parameters when outputting them back in an HTML attribute, allowing ...

4.8CVSS5.1AI score0.01188EPSS
SaveExploits3References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/03 12:00 a.m.•3 views

CVE-2021-24991: Improper Neutralization of Input During Web Page Generation

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard...

4.8CVSS5.8AI score0.01188EPSS
SaveExploits3References3
CNNVD
CNNVD
•added 2022/01/03 12:00 a.m.•30 views

WordPress plugin WooCommerce PDF Invoices & Packing Slips 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin. A cross-site scripting vulnerability exists in the WordPre...

4.8CVSS4.9AI score0.01188EPSS
SaveExploits3References1
wpexploit
wpexploit
•added 2021/12/06 12:00 a.m.•60 views

WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting

The plugin does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard...

4.8CVSS1.8AI score0.01188EPSS
SaveExploits3
Patchstack
Patchstack
•added 2021/12/06 12:00 a.m.•34 views

WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 2.10.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress WooCommerce PDF Invoices & Packing Slips plugin versions = 2.10.4. Solution Update the WordPress WooCommerce PDF Invoices & Packing Slips plugin to the latest available version at least 2.10.5...

4.8CVSS3.2AI score0.01188EPSS
SaveExploits3References3Affected Software1
WPVulnDB
WPVulnDB
•added 2021/12/06 12:00 a.m.•23 views

WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting

The plugin does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard PoC...

4.8CVSS1AI score0.01188EPSS
SaveExploits3Affected Software1
CNVD
CNVD
•added 2019/08/14 12:00 a.m.•11 views

WordPress woocommerce-pdf-invoices-packing-slips plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. woocommerce-pdf-invoices-packing-slips plugin is used in one of the invoices sent for e-commerce plugin. A cross-site...

6.1CVSS6.2AI score0.00922EPSS
SaveExploits0References1
OSV
OSV
•added 2019/08/12 3:15 p.m.•11 views

CVE-2017-18506

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

6.1CVSS5.8AI score0.00922EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/12 3:15 p.m.•22 views

CVE-2017-18506

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

6.1CVSS6.1AI score0.00922EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/08/12 2:58 p.m.•29 views

CVE-2017-18506

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

6.2AI score0.00922EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/12 2:58 p.m.•65 views

CVE-2017-18506

CVE-2017-18506 affects the WordPress plugin woocommerce-pdf-invoices-packing-slips (before 2.0.13). The vulnerability is an XSS flaw triggered via the tab or section variable on the plugin’s settings screens. Public documentation consistently identifies this as a client-side script execution risk...

6.1CVSS6AI score0.00922EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•2 views

CVE-2017-18506: Improper Neutralization of Input During Web Page Generation

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

6.1CVSS5.8AI score0.00922EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2017/10/05 12:00 a.m.•19 views

WordPress WooCommerce PDF Invoices & Packing Slips plugin <=2.0.12 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Detectify in WordPress WooCommerce PDF Invoices & Packing Slips plugin versions =2.0.12. Solution Update the WordPress WooCommerce PDF Invoices & Packing Slips plugin to the latest available version at least 2.0.13...

2.8AI score
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2017/02/10 12:00 a.m.•16 views

Woocommerce PDF Invoices Packing Slips < 2.0.13 - XSS

The WooCommerce PDF Invoices & Packing Slips WordPress plugin was affected by a XSS security vulnerability...

4.3CVSS3.3AI score0.00922EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder