Accusoft: >> Prizmdoc >> 13.0 Security Vulnerabilities
Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).
CVSS Score
9.1
EPSS Score
0.004
Published
2018-12-10
Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file.
CVSS Score
6.1
EPSS Score
0.003
Published
2018-09-18