CVE-2024-56527

The TCPDF PHP library (versions before 6.8.0 ) contains a vulnerability where the Error() function fails to use htmlspecialchars when processing error messages. This insufficient cleansing of user-supplied data during web page generation can allow a remote attacker to execute arbitrary code . Rem...