Macro-pdfviewer (Xwikisas) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-11-13. Vendor: Xwikisas.

CVEs of Macro-pdfviewer

• CVE-2024-52300 - CVSS 9.1 (critical), 2024-11-13: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS for any…
• CVE-2024-52299 - CVSS 7.5 (high), 2024-11-13: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Any user with view right on XWiki.PDFViewerService can access any attachment stored in…
• CVE-2024-52298 - CVSS 7.5 (high), 2024-11-13: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view any attachment using the "Delegate my…
• CVE-2024-30263 - CVSS 7.7 (high), 2024-04-04: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Users with edit rights can access restricted PDF attachments using the PDF Viewer macro,…