← Back

Prizmdoc

prizmdoc

Vendor: Accusoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-15805
1Accusoft
1Prizmdoc
Nov 21, 2024
Dec 10, 2018
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).
CVE-2018-15546
1Accusoft
1Prizmdoc
Nov 21, 2024
Sep 18, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file.