cve/2022/CVE-2022-4321.md

### [CVE-2022-4321](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4321)
![](https://img.shields.io/static/v1?label=Product&message=PDF%20Generator%20for%20WordPress&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%200%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20(XSS)&color=brighgreen)

### Description

The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin

### POC

#### Reference
- https://wpscan.com/vulnerability/6ac1259c-86d9-428b-ba98-7f3d07910644

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/cyllective/CVEs
- https://github.com/kwalsh-rz/github-action-ecr-scan-test