CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting vulnerability triggered by a specially crafted PDF file. The issue affects PrizmDoc’s handling of PDFs, enabling injection of script/HTML that could be executed in a victim’s browser. Documented across CVE-2018-1554...