Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Pdf.js Viewer Project Clear all filters
TI-2022-04268 CVE-2022-4670 · GHSA-prq5-cfmm-gwc2

PDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The PDF.js Viewer WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the cont…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2023-02-06 Fixed in 2.1.8
TI-2021-07041 CVE-2021-24759 · GHSA-f8m6-8wfx-7hpr

PDF.js Viewer < 2.0.2 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as low as Contributor to to perform Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-12-06 Fixed in 2.0.2 CWE-79