Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:10:30 +0000 CVE-2023-0479 — Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS https://cve.radiocsirt.org/vuln/cve-2023-0479 <p><strong>Affected:</strong> Unknown Print Invoice &amp; Delivery Notes for WooCommerce</p> <p>The Print Invoice &amp; Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding.</p> <p><strong>Affected:</strong> Unknown Print Invoice &amp; Delivery Notes for WooCommerce</p> <p>The Print Invoice &amp; Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding.</p> https://cve.radiocsirt.org/vuln/cve-2023-0479