CVE-2024-52300

Published: 2024-11-13T16:15Z

Last Modified: 2024-11-18T17:29Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS for any user who can edit a page. XSS can impact the confidentiality, integrity and availability of the whole XWiki installation when an admin visits the page with the malicious code. This is fixed in 2.5.6. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt