Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.01464·Published 2023-08-28·Fixed in 5.2.8CWE-79