Description (CNA)
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / WooCommerce PDF Invoices & Packing Slips | affected 2.16.0 before 2.16.0 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.