https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:34:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-245269 EUVD-2026-245269 https://cve.radiocsirt.org/vuln/euvd-2026-245269 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0479 <p>The Print Invoice &amp; Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding.</p> <p>The Print Invoice &amp; Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0479 https://cve.radiocsirt.org/vuln/ghsa-x6j8-27mr-ghm3 <p>The Print Invoice &amp; Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding.</p> <p>The Print Invoice &amp; Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding.</p> https://cve.radiocsirt.org/vuln/ghsa-x6j8-27mr-ghm3 https://cve.radiocsirt.org/vuln/gsd-2023-0479 gsd-2023-0479 https://cve.radiocsirt.org/vuln/gsd-2023-0479