CVE-2022-4788

The CVE-2022-4788 entry describes a Stored XSS vulnerability in the WordPress plugin Embed PDF up to version 1.0.6. The issue arises because the plugin does not validate and escape certain shortcode attributes when the shortcode is embedded in a page or post, enabling users with the contributor r...