CVE-2022-2092
11.07.2022, 13:15
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.
| Vendor | Product | Version |
|---|---|---|
| wpovernight | woocommerce_pdf_invoices\&_packing_slips | 𝑥 < 2.16.0 |
𝑥
= Vulnerable software versions