Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-24991 1 Wpovernight 1 Woocommerce Pdf Invoices\& Packing Slips 2024-11-21 4.8 Medium
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard
CVE-2017-18506 1 Wpovernight 1 Woocommerce Pdf Invoices\& Packing Slips 2024-11-21 N/A
The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.