Overview
- Description
- macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS for any user who can edit a page. XSS can impact the confidentiality, integrity and availability of the whole XWiki installation when an admin visits the page with the malicious code. This is fixed in 2.5.6.
- Source
- security-advisories@github.com
- NVD status
- Awaiting Analysis
Risk scores
CVSS 3.1
- Type
- Secondary
- Base score
- 9
- Impact score
- 6
- Exploitability score
- 2.3
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
Weaknesses
- security-advisories@github.com
- CWE-80
Social media
- Hype score
- Not currently trending
[CVE-2024-52300: CRITICAL] Beware of XSS risk in macro-pdfviewer for XWiki due to unescaped parameters. Update to version 2.5.6 to mitigate the security vulnerability. #cybersecurity,#vulnerability https://t.co/4QVHZA2XEQ https://t.co/Bgsou6dmgo
@CveFindCom
13 Nov 2024
26 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-52300 macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS for any user wh… https://t.co/NJdADLMIcH
@CVEnew
13 Nov 2024
192 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes