Non notée
CVE-2021-24759 The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes,…
Description
The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as low as Contributor to to perform Cross-Site Scripting attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PDF.js Viewer 2.0 | premières → < 2.0.2 | 2.0.2 |