CVE-2022-2537: vulnerability in WooCommerce PDF Invoices & Packing Slips
WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.7%
exploitation probability
0.7%top 50% of all CVEs
observed exploitation
nono source reports it
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting.
Affected products
Unknown · WooCommerce PDF Invoices & Packing SlipsRelated CVEs — WooCommerce PDF Invoices & Packing Slips
In the same product, most dangerous first.