CVE-2022-2537: Improper Neutralization of Input During Web Page Generation

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting...

CVE-2022-2092: Improper Neutralization of Input During Web Page Generation

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks...

PT-2022-14852

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoices & Packing Slips versions prior to 2.16.0 Description The issue allows attackers to conduct reflected cross-site scripting attacks due to a parameter on the setting page not being properly escaped. This makes it possibl...

CVE-2021-24991

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard...

PT-2022-9551

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoices & Packing Slips WordPress plugin versions prior to 2.10.5 Description The issue is related to a Reflected Cross-Site Scripting in the admin dashboard. This occurs because the tab and section parameters are not properly...

CVE-2021-24991: Improper Neutralization of Input During Web Page Generation

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard...

WordPress plugin WooCommerce PDF Invoices & Packing Slips 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin. A cross-site scripting vulnerability exists in the WordPre...

CVE-2017-18506

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

CVE-2017-18506

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

CVE-2017-18506: Improper Neutralization of Input During Web Page Generation

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

PT-2019-8441

Name of the Vulnerable Software and Affected Versions woocommerce-pdf-invoices-packing-slips plugin versions prior to 2.0.13 Description The issue allows for XSS via the tab or section variable on settings screens. Recommendations For versions prior to 2.0.13, update to version 2.0.13 or later to...