medium5.9
CVE-2025-24644
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delive…
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels print-invoices-packing-slip-labels-for-woocommerce allows Stored XSS.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through <= 4.7.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webtoffee | Woocommerce Pdf Invoices\, Packing Slips\, Delivery Notes And Shipping Labels | before 4.7.2 |