Threat Intelligence Database

CVE-2025-59788 is a cross-site scripting (XSS) vulnerability affecting the PDF viewer component of Nextcloud in multiple versions prior to specified patch releases. The vulnerability exists in a reachable example directory (files_pdfviewer) and allows an attacker to execute arbitrary JavaScript in the context of a user's browser by delivering a crafted PDF file to viewer.html. This can lead to session hijacking, credential theft, or other malicious actions within the user's session. Although no known exploits are currently reported in the wild, the vulnerability is related to a previous XSS issue (CVE-2024-4367), indicating a recurring weakness in the PDF viewer. European organizations using affected Nextcloud versions are at risk, especially those relying heavily on Nextcloud for document collaboration and storage. Mitigation requires updating to the fixed versions as soon as they become available and restricting access to example directories. Countries with high Nextcloud adoption and significant cloud collaboration usage, such as Germany, France, and the Netherlands, are most likely to be impacted. Given the ease of exploitation and potential impact on confidentiality and integrity without requiring authentication, this vulnerability is assessed as high severity.

HighVulnerabilityGermanyFranceNetherlands+4#cve#cve-2025-59788

A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS up to 5.202506.a. This issue affects some unknown processing of the file publiccms-parent/publiccms/src/main/webapp/resource/plugins/pdfjs/viewer.html. The manipulation of the argument File leads to open redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named f1af17af004ca9345c6fe4d5936d87d008d26e75. It is recommended to apply a patch to fix this issue.

MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve#cve-2025-7953