Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbCydaveWPVDB-ID:6AC1259C-86D9-428B-BA98-7F3D07910644
HistoryJan 16, 2023 - 12:00 a.m.

PDF Generator for WordPress < 1.1.2 - Reflected XSS

2023-01-1600:00:00
cydave
wpscan.com
7
wordpress pdf generator
reflected xss
vulnerable dompdf
high privilege user

0.001 Low

EPSS

Percentile

46.5%

JSON

The plugin includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin

PoC

Make a logged in admin open the following URL: https://example.com/wp-content/plugins/pdf-generator-for-wp/package/lib/dompdf/vendor/dompdf/dompdf/I18N/Arabic/Examples/Query.php?keyword=">

CPENameOperatorVersion
pdf-generator-for-wplt1.1.2

Related

cve 1
nuclei 1
wpexploit 1
prion 1
cvelist 1
nvd 1
cve
cve
CVE-2022-4321
2023-02-06 20:15:11
nuclei
nuclei
PDF Generator for WordPress < 1.1.2 - Cross Site Scripting
2023-04-21 08:56:01
wpexploit
wpexploit
PDF Generator for WordPress < 1.1.2 - Reflected XSS
2023-01-16 00:00:00
prion
prion
Cross site scripting
2023-02-06 20:15:00
cvelist
cvelist
CVE-2022-4321 PDF Generator for WordPress < 1.1.2 - Reflected XSS
2023-02-06 19:59:27
nvd
nvd
CVE-2022-4321
2023-02-06 20:15:11

0.001 Low

EPSS

Percentile

46.5%

JSON
Related for WPVDB-ID:6AC1259C-86D9-428B-BA98-7F3D07910644
cve1nuclei1wpexploit1prion1cvelist1nvd1