medium6.1
CVE-2022-2092
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to…
Impact
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpovernight | Woocommerce Pdf Invoices\& Packing Slips | before 2.16.0 |