PT-2021-16062

Name of the Vulnerable Software and Affected Versions Wonder PDF Embed WordPress plugin versions prior to 1.7 Description The issue allows users with a role as low as Contributor to perform Stored XSS attacks due to the lack of escaping parameters of the wonderplugin pdf shortcode. Recommendation...