WordPress WooCommerce PDF Invoices & Packing Slips <2.15.0 - Cross-Site Scripting
WordPress WooCommerce PDF Invoices & Packing Slips 2.15.0 does not escape some URLs before outputting them in attributes, leading to reflected cross-site scripting.
woocommerce_pdf_invoicesPoC 已收录
CVSS5.4