A Cross Site Scripting (XSS) vulnerability exists in the WordPress BSK PDF Manager plugin versions up to 3.8.1. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. The vulnerability can lead to security breaches if not addressed. Defenders should assess their exposure, verify and update the plugin, and implement additional security measures to detec [truncated]
The BSK PDF Manager plugin for WordPress has a vulnerability that allows exposure of sensitive system information to an unauthorized control sphere, potentially enabling retrieval of embedded sensitive data. This issue affects BSK PDF Manager versions from n/a through <= 3.7.2. The vulnerability has been assigned a CVSS score of 5.3 and a severity of MEDIUM. Users should review their deployments and consi [truncated]