Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
Pdf.js Viewer ProjectPdf.js Viewer

2 matches found

CVE
CVE•added 2023/02/06 7:59 p.m.•73 views

CVE-2022-4670

The CVE-2022-4670 entry affects the WordPress plugin PDF.js Viewer prior to 2.1.8. The vulnerability stems from not validating and escaping certain shortcode attributes, allowing stored cross-site scripting (Stored XSS) for users with the Contributor role and above when the shortcode is embedded ...

5.4CVSS5.3AI score0.00562EPSS
CVE
CVE•added 2021/12/06 3:55 p.m.•51 views

CVE-2021-24759

The CVE-2021-24759 affects the WordPress PDF.js Viewer plugin prior to 2.0.2. The issue is a lack of escaping for certain shortcode and Gutenberg Block attributes, enabling stored Cross-Site Scripting via inputs that could be submitted by users with a role as low as Contributor. Documented impact...

5.4CVSS5.2AI score0.00604EPSS