Security Advisory

CVE-2022-2537

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-29 17:15:36
Last updated 2024-08-03 00:39:08
Assigner WPScan
State PUBLISHED

Description

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting.