Skip to main content

Webviewer Ui

1 CVEs product

Monthly

CVE-2021-39307 MEDIUM POC This Month

PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Webviewer Ui
NVD
CVSS 3.1
6.1
EPSS
1.1%
EPSS 1% CVSS 6.1
MEDIUM POC This Month

PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Webviewer Ui
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy