CVE-2022-0663

The Print, PDF, Email by PrintFriendly WordPress plugin before 5.2.3 does not sanitise and escape the Custom Button Text settings, which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0663 Print, PDF, Email by PrintFriendly < 5.2.3 - Admin+ Stored Cross-Site Scripting

The Print, PDF, Email by PrintFriendly WordPress plugin before 5.2.3 does not sanitise and escape the Custom Button Text settings, which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0663

CVE-2022-0663 refers to the WordPress plugin Print, PDF, Email by PrintFriendly prior to version 5.2.3. The root cause is failure to sanitize and escape the Custom Button Text setting, which can allow stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed. Multi...