← All advisories

Medium severity6.1NVD Advisory· Published Aug 12, 2019· Updated Jun 17, 2026

CVE-2017-18506

CVE-2017-18506

Description

The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/woocommerce-pdf-invoices-packing-slips plugindescription
WordPress/Woocommerce PDF Invoices Packing Slipsllm-fuzzy
Range: <2.0.13
Package: https://wordpress.org/plugins/woocommerce-pdf-invoices-packing-slips
Wpovernight/Woocommerce Pdf Invoices\& Packing Slips
cpe:2.3:a:wpovernight:woocommerce_pdf_invoices\&_packing_slips:*:*:*:*:*:wordpress:*:*
Range: <2.0.13

Patches

Vulnerability mechanics

References

1

wordpress.org/plugins/woocommerce-pdf-invoices-packing-slips/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.