CoreCVE
Back

MEDIUM

WordPress Save as PDF Plugin by Pdfcrowd plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

Published Jun 4, 2024

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.3.

Affected products

Remediation

Vendor solution

Update to 3.3.0 or a higher version.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Patchstack
Published Jun 4, 2024
Updated Apr 28, 2026
Reserved May 17, 2024
Link CVE-2024-35649

CISA Vulnrichment

Updated Jun 4, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2024-35649

Red Hat

No data

ENISA EUVD

Assigner Patchstack
Published Jun 4, 2024
Updated Apr 28, 2026
Link EUVD-2024-35408

GitHub

No data