TCPDF Cross-site Scripting vulnerability · CVE-2024-32489 · GitHub Advisory Database · GitHub

TCPDF Cross-site Scripting vulnerability

Moderate severity GitHub Reviewed Published Apr 15, 2024 to the GitHub Advisory Database • Updated Apr 15, 2024

Package

tecnickcom/tcpdf (Composer)

Affected versions

< 6.7.4

Patched versions

6.7.4

Description

TCPDF before 6.7.4 mishandles calls that use HTML syntax.

References

Published by the National Vulnerability Database

Apr 15, 2024

Published to the GitHub Advisory Database Apr 15, 2024

Reviewed Apr 15, 2024

Last updated Apr 15, 2024