Dhtmlx - vulnerabilities (CVEs)
6 CVEs in 4 products, 0 in the last 30 days, newest from 2026-05-15.
Products
- File Explorer - 2 CVEs
- Pdf Export Module - 2 CVEs
- Dhtmlxspreadsheet - 1 CVEs
- Diagram - 1 CVEs
Newest CVEs of Dhtmlx
- CVE-2026-41553 - CVSS 10 (critical), 2026-05-15: PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An…
- CVE-2026-7182 - CVSS 9.2 (critical), 2026-05-15: Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html…
- CVE-2026-41552 - CVSS 9.2 (critical), 2026-05-15: PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user…
- CVE-2024-55213 - CVSS 6.5 (medium), 2025-02-07: Directory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the File Listing function.
- CVE-2024-55214 - CVSS 6.5 (medium), 2025-02-07: Local File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the file download functionality.
- CVE-2013-6281 - CVSS 4.3 (medium), 2013-10-25: Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers…
