Vulnerability Database

299,184

Total vulnerabilities in the database

CVE-2024-32489

TCPDF before 6.7.4 mishandles calls that use HTML syntax.

Published: Apr 15, 2024
Updated: Nov 4, 2025
CVE: CVE-2024-32489
GHSA: GHSA-g9wg-98c2-qv3v
Severity: Medium
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
tecnickcom / tcpdf	-	6.7.4
tcpdf_project / tcpdf	-	6.7.4

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime