CVE-2022-4788

The Embed PDF WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4788

creationtimestamp| type| source ---|---|--- 2025-03-11 04:41:14+00:00| seen| Telegram/jXFExf4vFsvsTzrwmji-j9KAmmJEupqPvwWlRFFhPJA2W5...

CVE-2022-4788

The Embed PDF WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4788

The Embed PDF WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4788 Embed PDF <= 1.0.6 - Contributor+ Stored XSS via Shortcode

The Embed PDF WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4788

The CVE-2022-4788 entry describes a Stored XSS vulnerability in the WordPress plugin Embed PDF up to version 1.0.6. The issue arises because the plugin does not validate and escape certain shortcode attributes when the shortcode is embedded in a page or post, enabling users with the contributor r...