Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PDFTron WebViewer 跨站脚本漏洞
Vulnerability Description
PDFTron WebViewer是加拿大PDFTron公司的一个avaScript PDF 库，适用于所有浏览器、框架和移动设备，无需服务器端依赖。支持 PDF、MS Office、CAD 和 30 多种格式。 PDFTron WebViewer UI 8.0及之前版本存在跨站脚本漏洞，该漏洞源于程序将危险的URL呈现为支持文档中的超链接，包括JavaScript URL，允许执行任意JavaScript代码。
CVSS Information
N/A
Vulnerability Type
N/A