XSS Stored via uploading malicious pdf
لاتدع للفراغ فراغ بل اشغل الفراغ بما يشغل الفراغ عن الفراغ
...............................................................................................................................
Mitigation :
Always strip the check for pdf security from the uploaded images. If you don’t want to pdf then there should be a validation check for uploading the pdf which tries to access data form users where it should check whether the pdf checking is containing any malicious payload and if yes then it should be removed.