## https://sploitus.com/exploit?id=WPEX-ID:03A201D2-535E-4574-AFAC-791DCF23E6E1
1. On the "Settings > Save as PDF > Basic Settings", enable custom HTML for "Button Image"
2. Add the following payload in the field: `<img src=x onerror=alert(1)>`
3. Observe the XSS vulnerability on all pages.