Html2pdf

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-56590 Jan 22, 18:16 CRITICAL POC Act Now

Apryse HTML2PDF SDK through version 11.10 has a command injection vulnerability in the InsertFromURL function allowing remote code execution when converting HTML to PDF.

Command Injection Html2pdf Apryse

NVD

CVSS 3.1

9.8

EPSS

0.0%

CVE-2025-56589 Jan 22, 17:15 HIGH POC This Week

A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0. [CVSS 7.5 HIGH]

Information Disclosure SSRF Html2pdf Apryse

NVD

CVSS 3.1

7.5

EPSS

0.1%

CVE-2023-39062 Aug 28, 18:15 PHP MEDIUM POC PATCH This Month

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS RCE Html2pdf

NVD GitHub

CVSS 3.1

6.1

EPSS

1.4%

CVE-2025-56590

EPSS 0% CVSS 9.8

CRITICAL POC Act Now

Apryse HTML2PDF SDK through version 11.10 has a command injection vulnerability in the InsertFromURL function allowing remote code execution when converting HTML to PDF.

Command Injection Html2pdf Apryse

NVD

CVE-2025-56589

EPSS 0% CVSS 7.5

HIGH POC This Week

A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0. [CVSS 7.5 HIGH]

Information Disclosure SSRF Html2pdf +1

NVD

CVE-2023-39062 PHP

EPSS 1% CVSS 6.1

MEDIUM POC PATCH This Month

PHP XSS RCE +1

NVD GitHub