| Package | Affected versions | Patched versions |
|---|---|---|
| woocommerce pdf invoices& packing slips | < 2.10.5 | 2.10.5 |
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free