WordPress pdf-print plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. pdf-print is used in one of the PDF files used to generate, and support for the print function of the plug-in. There is a...

CVE-2019-10687

KBPublisher 6.0.2.1 has SQL Injection via the admin/index.php?module=report entryid0 parameter, the admin/index.php?module=log id parameter, or an index.php?View=print&id= request...

CVE-2018-20970

The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues...

CVE-2018-20970

The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues...

Cross site scripting

The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues...

CVE-2018-20970

The CVE-2018-20970 entry concerns the WordPress plugin pdf-print (before 2.0.3). The connected documents confirm multiple cross-site scripting (XSS) vulnerabilities in this plugin, affecting versions prior to 2.0.3 (e.g.,

CVE-2018-20970

The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues...

PT-2019-10407

Name of the Vulnerable Software and Affected Versions WordPress pdf-print plugin versions prior to 2.0.3 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue...

CVE-2018-20970: Improper Neutralization of Input During Web Page Generation

The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues...

PT-2019-11993

Name of the Vulnerable Software and Affected Versions KBPublisher version 6.0.2.1 Description The issue concerns SQL Injection, which can be exploited through specific parameters in the application. The vulnerable parameters include entry id0 in the "admin/index.php?module=report" endpoint, id in...

CVE-2019-10687: Improper Neutralization of Special Elements used in an SQL Command

KBPublisher 6.0.2.1 has SQL Injection via the admin/index.php?module=report entryid0 parameter, the admin/index.php?module=log id parameter, or an index.php?View=print&id= request...

CVE-2019-5038

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave...

Stack overflow

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave...

CVE-2017-18528

The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues...

CVE-2017-18528

The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues...

Cross site scripting

The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues...

CVE-2017-18528

The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues...

CVE-2017-18528

CVE-2017-18528 corresponds to a vulnerability in the WordPress pdf-print plugin prior to version 1.9.4, described in the connected nuclei template as multiple XSS issues. Affected software: pdf-print plugin for WordPress (before 1.9.4). Impact: authenticated attackers can execute arbitrary JavaSc...

CVE-2019-5038: Stack-based Buffer Overflow

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave...

PT-2019-8462

Name of the Vulnerable Software and Affected Versions WordPress pdf-print plugin versions prior to 1.9.4 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 1.9.4, update to version 1.9.4 or later to resolve the issue...