Not rated
CVE-2022-2092 The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting…
Description
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WooCommerce PDF Invoices & Packing Slips 2.16 | earliest → < 2.16.0 | 2.16.0 |