CVE-2023-5971

CVE-2023-5971 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the Save as PDF Plugin by Pdfcrowd WordPress plugin prior to version 3.2.0. The vulnerability stems from insufficient sanitization and escaping of plugin settings, allowing high-privilege users, such as administrators, to inject malicious scripts. Rated Medium (CVSS 4.8), exploitation requires high privileges and user interaction, with potential impacts including information disclosure and limited integrity compromise. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.