https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:55:04.262391+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-52300 CVE-2024-52300 — macro-pdfviewer has a XSS through the width parameter 2026-10-06T23:55:04.263521+00:00

Affected: xwikisas macro-pdfviewer, xwikisas macro_pdfviewer

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS for any user who can edit a page. XSS can impact the confidentiality, integrity and availability of the whole XWiki installation when an admin visits the page with the malicious code. This is fixed in 2.5.6.