search

TwisterMc / pdfjs-viewer-shortcode

A Wordpress plugin for embedding PDFs using Mozilla's Excellent PDF.js
https://wordpress.org/plugins/pdfjs-viewer-shortcode/
Apache License 2.0
7 stars 5 forks source link

LFI in viewer #12

Closed cedl3693 closed 3 years ago

cedl3693 commented 3 years ago

I found a LFI in viewer , i have the lastest version of this plugin (1.5.9) , and it's exploitable, where can i write to explain It? . For patch It asap . Sorry english is not my native language.

TwisterMc commented 3 years ago

Is the issue in PDFjs v2.6.347 https://github.com/mozilla/pdf.js/releases/tag/v2.6.347

If not, I can upgrade to the latest version of PDFjs and that'll fix multiple issues.

TwisterMc commented 3 years ago

I haven't heard back in a while so closing due to inactivity.