CVE-2017-18506: Improper Neutralization of Input During Web Page Generation

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...

PT-2019-8441

Name of the Vulnerable Software and Affected Versions woocommerce-pdf-invoices-packing-slips plugin versions prior to 2.0.13 Description The issue allows for XSS via the tab or section variable on settings screens. Recommendations For versions prior to 2.0.13, update to version 2.0.13 or later to...

Piwigo Remote File Inclusion Vulnerability (CNVD-2017-00112)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A security vulnerability exists in the admin/plugin.php file in Piwigo 2.8.3 and earlier versions, which stems from the...