Vulnerability Details CVE-2024-10891
The Save as PDF Plugin by Pdfcrowd plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'save_as_pdf_pdfcrowd' shortcode in all versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.7%
CVSS Severity
CVSS v3 Score 6.4
Products affected by CVE-2024-10891
-
cpe:2.3:a:pdfcrowd:save_as_pdf:-
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.0.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.0.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.1.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.10.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.11.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.2.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.2.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.2.2
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.3.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.4.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.4.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.5.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.6.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.7.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.8.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.8.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.9.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:1.9.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.0.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.1.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.1.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.10.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.11.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.12.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.13.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.14.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.14.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.15.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.15.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.16.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.16.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.17.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.2.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.2.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.3.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.4.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.4.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.5.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.5.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.6.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.6.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.6.2
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.7.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.7.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.8.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.8.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.9.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.9.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.9.2
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.9.3
-
cpe:2.3:a:pdfcrowd:save_as_pdf:2.9.4
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.0.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.0.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.1.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.2.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.2.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.2.2
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.2.3
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.3.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.3.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:3.4.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:4.0.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:4.0.1
-
cpe:2.3:a:pdfcrowd:save_as_pdf:4.1.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:4.2.0
-
cpe:2.3:a:pdfcrowd:save_as_pdf:4.2.1