CVE-2024-57240

A Cross-Site Scripting (XSS) vulnerability exists in the Rendering Engine component of Apryse WebViewer v11.1 and earlier versions. Attackers can exploit this flaw by providing a crafted PDF file to execute arbitrary code . A proof-of-concept has been published. Exploitation details regarding spe...