Html2pdf Project: >> Html2pdf Security Vulnerabilities
Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php.
CVSS Score
6.1
EPSS Score
0.301
Published
2023-08-28
An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious <link> tag in the converted HTML document.
CVSS Score
8.8
EPSS Score
0.004
Published
2022-01-18