Security PrinceXML Wrapper Class Command Injection July 6, 2016 007admin Leave a comment Wrapper classes provided by PrinceXML appear to suffer from command injection vulnerabilities.