Threats tagged 'ghsa-p483-rf4f-35p7'

A reflected Cross-site Scripting (XSS) vulnerability exists in the Invoice Gateway for WooCommerce – Invoice Payment Gateway plugin, affecting versions up to 1.1.6. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to execute arbitrary scripts in a user's browser. The vulnerability has a high severity rating with a CVSS score of 7.1.