WordPress Save as PDF plugin by Pdfcrowd Plugin < 3.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Save as PDF plugin by Pdfcrowd Type Plugin Vulnerable versions 3.2.0 Fixed in 3.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5971 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a2f215ee118f Credits Avatar Mitu...

CVE-2023-5971

The Save as PDF Plugin by Pdfcrowd WordPress plugin before 3.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite se...

CVE-2023-5971 Save as PDF < 3.2.0 - Admin+ Stored XSS

The Save as PDF Plugin by Pdfcrowd WordPress plugin before 3.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite se...

CVE-2023-5971

The CVE-2023-5971 entry concerns the WordPress plugin Save as PDF by Pdfcrowd (versions before 3.2.0). The issue is that several plugin settings were not properly sanitised/escaped, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in mult...