Skip to content
OpenAdvisories

Product · PrestaShop

M4 PDF plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2022-45448

    Cross-site Scripting in M4 PDF plugin for Prestashop sites

    M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document crafting vulnerability. The resource /m4pdf/pdf.php uses templates to dynamically create documents. In the case that the template does not exist, …

    PrestaShop M4 PDF plugin