Lucene search
Lana CodesWPEX-ID:2A67C290-2A27-44FE-95AE-2D427E9D7548HistoryJan 10, 2023 - 12:00 a.m.
PDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via Shortcode
2023-01-1000:00:00
Lana Codes
105
pdf.js viewer contributor exploit stored xss shortcode
EPSS
0.001
Percentile
25.5%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
[pdfjs-viewer viewer_height='" onmouseover="alert(1)"']Related
wpvulndb
wpvulndb
PDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via Shortcode
2023-01-10 00:00:00
prion
prion
Cross site scripting
2023-02-06 20:15:00
cvelist
cvelist
CVE-2022-4670 PDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via Shortcode
2023-02-06 19:59:43
nvd
nvd
CVE-2022-4670
2023-02-06 20:15:11
cve
cve
CVE-2022-4670
2023-02-06 20:15:11