Cross-Site Scripting Vulnerability in Save as PDF by Pdfcrowd

CVE-2025-59552

What is CVE-2025-59552?

A Cross-Site Scripting (XSS) vulnerability is present in the Save as PDF feature developed by Pdfcrowd. This flaw allows an attacker to inject malicious scripts that may be stored and executed on user systems, compromising user data and security. The affected versions include Save as PDF prior to 4.5.2 and can be exploited through improper input handling during web page generation. It’s crucial for users of the plugin to apply security measures and updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References