CVE-2021-24991

MEDIUMNuclei

WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24991 has a selected CVSS score of 4.8 (medium); EIP currently links 1 Nuclei template.

Description

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

WooCommerce PDF Invoices & Packing Slips

CVE List2.10.5 to < 2.10.5affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site ScriptingCVSS 4.8

The Wordpress plugin WooCommerce PDF Invoices & Packing Slips before 2.10.5 does not escape the tab and section parameters before reflecting it an attribute, leading to a reflected cross-site scripting in the admin dashboard.

Impact

An attacker can exploit this vulnerability to inject malicious scripts into web pages viewed by users, leading to potential theft of sensitive information or unauthorized actions.

Remediation

Update to the latest version of the WooCommerce PDF Invoices & Packing Slips WordPress Plugin (2.10.5 or higher) to mitigate the vulnerability.

WeaknessesCWE-79
Authorscckuailong
Template tagscvecve2021xsswpwordpresswp-pluginauthenticatedwpscanwpovernightvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:wpovernight:woocommerce_pdf_invoices\&_packing_slips:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/88e706df-ae03-4665-94a3-db226e1f31a9 https://nvd.nist.gov/vuln/detail/CVE-2021-24991 https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

2