Lucene search

K
patchstackYudistira AryaPATCHSTACK:32BF593B0FA6A0878866DA3CFB374310
HistoryJun 27, 2024 - 12:00 a.m.

WordPress PDF Viewer Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

2024-06-2700:00:00
Yudistira Arya
patchstack.com
3
wordpress pdf viewer
cross site scripting
vulnerable version 1.1.0
low severity

AI Score

6.9

Confidence

High

Software

PDF Viewer

Type

Plugin

Vulnerable versions

<= 1.1.0

Fixed in

N/A

OWASP Top 10

A3: Injection

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-4367

Patch priority

Low

CVSS severity

Low (4)

Developer

Claim ownership

PSID

d7d95e288520

Credits

Yudistira Arya Yudistira Arya

Required privilege

Author

Published

27 June, 2024

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
pdf_viewer_projectpdf_viewerRange1.1.0wordpress
VendorProductVersionCPE
pdf_viewer_projectpdf_viewer*cpe:2.3:a:pdf_viewer_project:pdf_viewer:*:*:*:*:*:wordpress:*:*