PT-2026-45434 · E2Pdf.Com · E2Pdf

Hhhai · CVE-2026-42681 · Published 2026-06-01 · Updated 2026-06-01

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions e2pdf versions prior to 1.32.15

Description The software contains an issue involving improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting (XSS). This occurs when an application includes untrusted data in a web page without proper validation or encoding, enabling an attacker to execute malicious scripts in the victim's browser.

Recommendations Update e2pdf to version 1.32.15 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-42681

Affected Products

E2Pdf

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-42681 · Security Note
• https://patchstack.com/database/wordpress/plugin/e2pdf/vulnerability/wordpress-e2pdf-plugin-1-32-14-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note