TI-2024-18565 CVE-2024-27962 · GHSA-9pxg-gf82-j5w9WordPress wp-mpdf plugin <= 3.7.1 - Reflected Cross Site Scripting (XSS) vulnerabilityPriority LOW 31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Florian 'fkrauthan' Krauthan allows Reflected XSS.This issue affects wp-mpdf: from n/a through 3.7.1.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00397 · Published 2024-03-21 · No fix listed CWE-79