Lucene search
MikaWPEX-ID:A4162E96-A3C5-4F38-A60B-AA3ED9508985HistoryFeb 09, 2022 - 12:00 a.m.
E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)
2022-02-0900:00:00
Mika
93
0.001 Low
EPSS
Percentile
35.9%
The plugin does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Refer to https://mikadmin.fr/tech/XSS-Stored-E2Pdf-798ef69b0e13c36acf5446358d57c965Dx90666bNvCw98.pdfRelated
nuclei
nuclei
WordPress E2Pdf <1.16.45 - Cross-Site Scripting
2022-10-07 15:08:33
wpvulndb
wpvulndb
E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)
2022-02-09 00:00:00
nvd
nvd
CVE-2022-0535
2022-03-07 09:15:09
cve
cve
CVE-2022-0535
2022-03-07 09:15:09
cnvd
cnvd
WordPress E2Pdf Plugin Cross-Site Scripting Vulnerability
2022-03-09 00:00:00
cvelist
cvelist
CVE-2022-0535 E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)
2022-03-07 08:16:51
prion
prion
Cross site scripting
2022-03-07 09:15:00