{"id":"CVE-2023-39062","details":"Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php.","aliases":["GHSA-99fg-2h75-m92h"],"modified":"2026-08-12T03:51:16.436329867Z","published":"2023-08-28T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39062.json","unresolved_ranges":[{"extracted_events":[{"introduced":"HTML2PDF"},{"fixed":"v.5.2.8"}],"source":"DESCRIPTION"}]},"references":[{"type":"WEB","url":"https://github.com/sectroyer/CVEs/tree/main/CVE-2023-39062"},{"type":"WEB","url":"https://github.com/spipu/html2pdf/blob/92afd81823d62ad95eb9d034858311bb63aeb4ac/CHANGELOG.md"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39062.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39062"},{"type":"PACKAGE","url":"https://github.com/afine-com/CVE-2023-39062"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/spipu/html2pdf","events":[{"introduced":"0"},{"fixed":"6c94dcd48c94c6c73f206629839c1ebd81e8c726"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:html2pdf_project:html2pdf:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.2.8"}]}}],"versions":["v5.2.7","v5.2.6","v5.2.5","v5.2.4","v5.2.3","v5.2.2","v5.2.1","v5.2.0","v5.1.0","v5.0.1","v5.0.0","v4.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39062.json"}}],"schema_version":"1.9.0"}