Advisories · Technology
awsmin Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files.
Every CVE that names awsmin Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Embed Any Document <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'embeddoc' Shortcode
- awsmin Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Embed Any Document <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
- awsmin Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.5 - Authenticated (Contributor+) Blind Server-Side Request Forgery via embeddoc Shortcode
- awsmin Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files
- Server-side request forgery (SSRF)