Cross site scripting

The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2023-0033

The CVE-2023-0033 entry concerns the PDF Viewer WordPress plugin (versions before 1.0.0). The issue is a failure to validate/escape a shortcode attribute, enabling Stored Cross-Site Scripting for users with a role as low as contributor. Affected component: shortcode handling in the plugin; root c...

CVE-2023-0033 PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode

The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2023-0033 PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode

The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

Adobe Acrobat and Reader Buffer Overflow Vulnerability (CNVD-2023-51685)

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. A buffer overflow vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

WordPress Plugin PDF Viewer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. WordPress plugin is an application plug-in. Cross-site scripting vulnerability...

CVE-2022-42401

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42412

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to cause a sensitive memory leak...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. Adobe Acrobat and Reader has a use-after-release vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, related to reading beyond the buffer in memory, allow attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud involve reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information through a...

PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. PoC Exploit shortcode: pdfviewer height='" onmouseover="alert1"'http://localhost/file.pdf/pdfviewer...

PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. Exploit shortcode: pdfviewer height='" onmouseover="alert1"'http://localhost/file.pdf/pdfviewer...

WordPress PDF Viewer Plugin < 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer Type Plugin Vulnerable versions 1.0.0 Fixed in 1.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0033 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6e3ff2a57463 Credits István Márton Required...

The vulnerability of the ImageConversion.api file in programs for viewing and editing PDF files in Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 arises from reading data beyond the buffer in memory. This allows attackers to disclose protected information.

The vulnerability of the ImageConversion.api file in programs for viewing and editing PDF files in Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 is related to reading data outside of the buffer in memory...

The vulnerability in the Acrobat.dll executable of PDF file viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 arises from reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of the Acrobat.dll executable files used by PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 is related to reading data beyond the buffer in memory. Exploitin...

CVE-2022-41842

An issue was discovered in Xpdf 4.04. There is a crash in gfseekIOFILE, long, int in goo/gfile.cc...

XPDF 缓冲区错误漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, including a text extractor, image converter, HTML converter and more. A buffer error vulnerability exists in XPDF version 4.04, which stems from a crash in the XRef::fetchint, int, Object, int function in xpdf/XRef.cc...

UBUNTU-CVE-2022-38334

XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree at Catalog.cc...

PT-2022-24372 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: XPDF versions 4.04 and earlier Description: A stack overflow issue was discovered in the function Catalog::countPageTree at Catalog.cc. This issue affects XPDF and can be exploited via the Catalog::countPageTree function. Recommendations: For...