| |
Vulnerability CVE-2022-2537
Published: 2022-08-29
| Description: |
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://wpscan.com/vulnerability/ae613148-85d8-47a0-952d-49c29584676f
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
