Skip to content
Sign in
5.4 Medium

CVE-2022-4753 The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before…

Description

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.

Affected products and versions

Product Affected versions Fixed in
Print-O-Matic 2.1 earliest → < 2.1.8 2.1.8

Other CVEs of Print-O-Matic

The 2 CVEs of Print-O-Matic →
CVE-2021-24710 The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in… Not rated
Track this CVE