Threats tagged 'ghsa-hr4j-j5wc-96jv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2026-7650The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Medium6.42026-05-08GCVE DatabaseCVE-2026-7650 The E2Pdf – Export Pdf Tool for WordPress plugin is vulnerable to stored cross-site scripting (XSS) via the 'id' attribute of the e2pdf-download shortcode in all versions up to and including 1.32.17. This vulnerability arises from insufficient input sanitization and output escaping, allowing authenticated users with Contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages. Report on CVE-2026-7650 Vulnerability CWE-79 #ghsa-hr4j-j5wc-96jv	GCVE Database	2026-05-08

Page 1 of 1