PDF Export Module vulnerabilities

2 known vulnerabilities in PDF Export Module from Dhtmlx. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  PDF Export Module: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-41553May 15, 2026Dhtmlx

  PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthenticated attacker can inject the malicious JavaScript code to the parameter whose value is processed

• 7.5 High severity

  PDF Export Module: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-41552May 15, 2026Dhtmlx

  PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the gener