Generate PDF using Contact Form 7, CVE-2022-3070

CVE, Research URL: CVE-2022-3070
Home page URL: Security reports for Generate PDF using Contact Form 7
Application: Generate PDF using Contact Form 7
Published on: Sep 26, 2022
Research Description: The Generate PDF WordPress plugin before 3.6 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected versions: max 3.6.
Status: vulnerable