VULNERABILITY INTELLIGENCE

CVE-2023-0033

CVSS score5.4 MEDIUM

EPSS probability0.47%

CISA KEVNot currently listed

Published2023-01-30

Last modified2026-06-17

Description

The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.