Not rated
CVE-2021-24759 The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes,…
Description
The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as low as Contributor to to perform Cross-Site Scripting attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PDF.js Viewer 2.0 | earliest → < 2.0.2 | 2.0.2 |