Description

Hi there,
It’s my pleasure to submit a report to you again to maintain the safety of the project.Most users can upload files in the module named ‘Resources’ .We can upload pdf files.But uploading malicious pdf files will cause xss vulnerability which will cause great harm to users of the website.

You can click the following link to download the malicious pdf file I provided.pdf_file link.You can also search for more dangerous pdf files on the Internet or make it yourself.And for details you can click my video link below to watch.

link

poc
https://drive.google.com/file/d/10PjyAKOgWNGd77J_vtuK_invJ-6hpUOj/view?usp=share_link

If anyone views this pdf file then it will be attacked.

Reference

You can also refer to the following link to view the vulnerability information related to the pdf file

link_reference