CVE-2018-15805: Accusoft Prizmdoc

Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days.

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).

Affected products

• Accusoft Prizmdoc: before 13.5 (fixed in 13.5)

Published 2018-12-10. Last modified 2026-06-17.