Skip to content
Sign in
4.8 Medium

CVE-2023-5229 The E2Pdf WordPress plugin before 1.20.20 does not sanitize and escape some of its settings, which could allow high…

Description

The E2Pdf WordPress plugin before 1.20.20 does not sanitize and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Affected products and versions

Product Affected versions Fixed in
E2Pdf 1.20 earliest → < 1.20.20 1.20.20
Track this CVE