CVE-2023-23707: Awsm Embed Any Document

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Unrestricted Upload of File with Dangerous Type vulnerability in Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files allows Stored XSS via upload of SVG and HTML files. This issue affects Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin <= 2.7.1 versions.

Affected products

• Awsm Embed Any Document: up to and including 2.7.1

Published 2023-03-23. Last modified 2026-06-17.