Skip to content
Sign in
Not rated

CVE-2021-24710 The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in…

Description

The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Affected products and versions

Product Affected versions Fixed in
Print-O-Matic 2.0 earliest → < 2.0.3 2.0.3

Other CVEs of Print-O-Matic

The 2 CVEs of Print-O-Matic →
CVE-2022-4753 The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before… 5.4 Medium
Track this CVE