Accusoft PrizmDoc version 13.3 and previous versions contains a Stored Cross-Site Scripting issue through a crafted PDF file.
accusoft prizmdoc