Security Advisory

CVE-2021-24991

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-03 12:49:10

Last updated 2024-08-03 19:49:14

Assigner WPScan

State PUBLISHED

Description

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard

← Browse all CVEs View on cve.org ↗