2 matches found
CVE-2017-18506: Improper Neutralization of Input During Web Page Generation
The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...
6.1CVSS5.8AI score0.00922EPSS
SaveExploits0References2
PT-2019-8441
Name of the Vulnerable Software and Affected Versions woocommerce-pdf-invoices-packing-slips plugin versions prior to 2.0.13 Description The issue allows for XSS via the tab or section variable on settings screens. Recommendations For versions prior to 2.0.13, update to version 2.0.13 or later to...
6.1CVSS0.00922EPSS
SaveExploits0References3
20