The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00516·Published 2024-01-16·Fixed in 4.7.2CWE-79