CVE-2024-43318

MEDIUM 5.4CVE-2024-43318 · Published 18/08/2024 · updated 17/06/2026

In short

CVE-2024-43318 is a MEDIUM (CVSS 5.4) vulnerability affecting e2pdf (e2pdf).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 17.9% of all vulnerabilities.
Fix: update to 1.25.11 or later.

Package	Affected versions	Patched versions
e2pdf e2pdf	`< 1.25.11`	`1.25.11`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.25.05.

References

patchstack.com/database/Wordpress/Plugin/e2pdf/vulnerability/wordpress-e2pdf-export-to-pdf-tool-for-wordpress-plugin-1-25-05-cross-site-scripting-xss-vulnerability

More vulnerabilities in e2pdf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

e2pdf

< 1.25.11

1.25.11

More vulnerabilities in e2pdf

See all →