6.1
Medium
CVE-2022-4321 The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to…
Description
The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PDF Generator for WordPress 1.1 | earliest → < 1.1.2 | 1.1.2 |