The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udraw_convert_url_to_base64 AJAX action (available to both unauthenticated and authenticated users) before using it i…
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.07879·Published 2022-04-25·Fixed in 3.3.3CWE-552