CVE-2024-52300 — AI Deep Analysis Summary

Q: What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A Cross-Site Scripting (XSS) flaw in PDF Viewer Macro. ⚠️ **Consequences**: Attackers can inject malicious scripts into pages, compromising user sessions and data integrity.

Q: Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: Improper input validation. 🔍 **Flaw**: The `width` parameter is not properly escaped. 📌 **CWE**: CWE-80 (Improper Neutralization of Input During Web Page Generation).

Q: Who is affected? (Versions/Components)

📦 **Product**: macro-pdfviewer. 🏢 **Vendor**: xwikisas (XWiki SAS). 📉 **Affected**: Versions **prior to 2.5.6**.

Q: What can hackers do? (Privileges/Data)

💻 **Actions**: Execute arbitrary JavaScript in victim's browser. 🔑 **Privileges**: Requires user to edit the page. 📊 **Impact**: High (CVSS H). Can steal cookies, redirect users, or deface pages.

Q: Is exploitation threshold high? (Auth/Config)

🔓 **Threshold**: Medium. 👤 **Auth**: Requires **Low** privileges (PR:L) - must be able to edit the page. 👁️ **UI**: Requires **User Interaction** (UI:R) - victim must view the page.

Q: Is there a public Exp? (PoC/Wild Exploitation)

🚫 **Public Exp**: No. 📂 **PoCs**: None listed in the data. 🌐 **Wild Exploitation**: Low risk currently, but dangerous if combined with social engineering.

Q: How to self-check? (Features/Scanning)

🔍 **Check**: Scan for `macro-pdfviewer` usage. 📝 **Feature**: Look for PDF attachments with `width` parameters in page content. 🛠️ **Tool**: Use SAST/DAST scanners targeting CWE-80 in XWiki environments.

Q: Is it fixed officially? (Patch/Mitigation)

✅ **Fixed**: Yes. 🔧 **Patch**: Upgrade to **version 2.5.6** or later. 🔗 **Ref**: GitHub Security Advisory GHSA-84wx-6vfp-5m6g.

Q: What if no patch? (Workaround)

🚧 **Workaround**: If patching is impossible, **disable** the PDF Viewer Macro. 🚫 **Restrict**: Limit page editing rights to trusted admins only. 👀 **Monitor**: Audit page edits for suspicious script injections.

Q: Is it urgent? (Priority Suggestion)

⏳ **Urgency**: High Priority. 📅 **Published**: 2024-11-13. 🔥 **Reason**: CVSS Score is High (H). Easy to exploit for those with edit rights. Patch immediately to prevent session hijacking.

Updated May 08, 2026 CVSS 9.1 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A Cross-Site Scripting (XSS) flaw in PDF Viewer Macro. <br>⚠️ **Consequences**: Attackers can inject malicious scripts into pages, compromising user sessions and data integrity.

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: Improper input validation. <br>🔍 **Flaw**: The `width` parameter is not properly escaped. <br>📌 **CWE**: CWE-80 (Improper Neutralization of Input During Web Page Generation).

Q3Who is affected? (Versions/Components)

📦 **Product**: macro-pdfviewer. <br>🏢 **Vendor**: xwikisas (XWiki SAS). <br>📉 **Affected**: Versions **prior to 2.5.6**.

Q4What can hackers do? (Privileges/Data)

💻 **Actions**: Execute arbitrary JavaScript in victim's browser. <br>🔑 **Privileges**: Requires user to edit the page. <br>📊 **Impact**: High (CVSS H). Can steal cookies, redirect users, or deface pages.

Q5Is exploitation threshold high? (Auth/Config)

🔓 **Threshold**: Medium. <br>👤 **Auth**: Requires **Low** privileges (PR:L) - must be able to edit the page. <br>👁️ **UI**: Requires **User Interaction** (UI:R) - victim must view the page.

Q6Is there a public Exp? (PoC/Wild Exploitation)

🚫 **Public Exp**: No. <br>📂 **PoCs**: None listed in the data. <br>🌐 **Wild Exploitation**: Low risk currently, but dangerous if combined with social engineering.

Q7How to self-check? (Features/Scanning)

🔍 **Check**: Scan for `macro-pdfviewer` usage. <br>📝 **Feature**: Look for PDF attachments with `width` parameters in page content. <br>🛠️ **Tool**: Use SAST/DAST scanners targeting CWE-80 in XWiki environments.

Q8Is it fixed officially? (Patch/Mitigation)

✅ **Fixed**: Yes. <br>🔧 **Patch**: Upgrade to **version 2.5.6** or later. <br>🔗 **Ref**: GitHub Security Advisory GHSA-84wx-6vfp-5m6g.

Q9What if no patch? (Workaround)

🚧 **Workaround**: If patching is impossible, **disable** the PDF Viewer Macro. <br>🚫 **Restrict**: Limit page editing rights to trusted admins only. <br>👀 **Monitor**: Audit page edits for suspicious script injections.

Q10Is it urgent? (Priority Suggestion)

⏳ **Urgency**: High Priority. <br>📅 **Published**: 2024-11-13. <br>🔥 **Reason**: CVSS Score is High (H). Easy to exploit for those with edit rights. Patch immediately to prevent session hijacking.

Continue exploring

Vulnerability detail Full AI analysis (login) xwikisas CWE-80