description: An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.
problem types: Cross-site Scripting (XSS) - Generic (CWE-79)
affected:
{
product: Nextcloud Server
vendor: n/a
versions:
status: affected, version: 18.0.3
}