CVE-2021-24991

Publication date

2022-01-03 12:49:10

Family

WPScan

State

PUBLISHED

Description

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard