CVE-2017-18506: Improper Neutralization of Input During Web Page Generation

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...