Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pf88-f4w3-rg5h

Опубликовано: 12 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.

EPSS

Процентиль: 44%
0.0021
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 3 лет назад

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.

EPSS

Процентиль: 44%
0.0021
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79