Unrated severityNVD Advisory· Published Jul 11, 2022· Updated Aug 3, 2024

WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting

CVE-2022-2092

Description

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Woocommerce PDF Invoices Packing Slipscpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.16.0
Package: https://wordpress.org/plugins/woocommerce-pdf-invoices-packing-slips

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/87546554-276a-45fe-b2aa-b18bfc55db2dmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000