PT-2021-22515

Name of the Vulnerable Software and Affected Versions: PDFTron's WebViewer UI versions 8.0 and below Description: The issue allows the execution of arbitrary JavaScript code due to the rendering of dangerous URLs, including JavaScript URLs, as hyperlinks in supported documents. Recommendations: F...

PDFTron WebViewer 跨站脚本漏洞

PDFTron WebViewer is an avaScript PDF library from PDFTron Canada for all browsers, frameworks and mobile devices with no server-side dependencies. Supports PDF, MS Office, CAD and more than 30 formats. A cross-site scripting vulnerability exists in PDFTron WebViewer UI 8.0 and prior versions,...

CVE-2021-39307: Improper Neutralization of Input During Web Page Generation

PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code...