Search vulnerabilities

Results 2

Export CSV
CVE-2023-39062

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Products
CVE-2021-45394

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious <link> tag in the converted HTML document.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Products