Print-o-matic Project

Print-o-matic

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2022-4753

Exploit
  • EPSS 0.26%
  • Veröffentlicht 23.01.2023 15:15:17
  • Zuletzt bearbeitet 03.04.2025 20:15:19

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting at...

4.8

CVE-2021-24710

Exploit
  • EPSS 0.21%
  • Veröffentlicht 08.11.2021 18:15:09
  • Zuletzt bearbeitet 21.11.2024 05:53:36

The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disal...