agentprime: bplugins-document-embedder-let-visitors-read-files-without-downloadingEvery new CVE for bplugins-document-embedder-let-visitors-read-files-without-downloading.https://agentprime.io/CVE-2026-109370: Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attributehttps://agentprime.io/advisories/CVE-2026-109370/https://agentprime.io/advisories/CVE-2026-109370/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 06:45:19 GMTCVE