Pdf.js Viewer Project Pdf.js Viewer
2 CVEs affecting Pdf.js Viewer Project Pdf.js Viewer. Latest disclosed: 2023-02-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4670 | Medium | 5.4 | 2023-02-06 | The PDF.js Viewer WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where… |
CVE-2021-24759 | Medium | 5.4 | 2021-12-06 | The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as lo… |