TI-2024-16554 CVE-2024-25097 · GHSA-g56g-7xj2-6p9wWordPress TNC PDF viewer Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)Priority LOW 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 2.8.0.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00419 · Published 2024-03-13 · No fix listed CWE-79