Beta

Report

WP Invoice <= 4.3.1 is vulnerable to Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Unauthenticated
Published
2022-04-26

Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

CVSS

Score:6.1

Severity:Medium

Version: 4.3.1

The plugin vendor has not patched this vulnerability at the moment.