CVE-2021-24759
06.12.2021, 16:15
The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as low as Contributor to to perform Cross-Site Scripting attacks
| Vendor | Product | Version |
|---|---|---|
| pdf.js_viewer_project | pdf.js_viewer | 𝑥 < 2.0.2 |
𝑥
= Vulnerable software versions