Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Print-o-matic Project Component: Print-o-matic Clear all filters
TI-2022-04349 CVE-2022-4753 · GHSA-rw59-8v68-3w3f

Print-O-Matic < 2.1.8 - Contributor+ Stored XSS via Shortcode

Priority HIGH 66

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 2.1.8
TI-2021-06992 CVE-2021-24710 · GHSA-xccw-hfwg-4hr9

Print-O-Matic < 2.0.3 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00676 Published 2021-11-08 Fixed in 2.0.3 CWE-79