Skip to content
OpenAdvisories

Vendor

alam00000

4 known vulnerabilities.

Products

bentopdf 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2026-41653 Public exploit

    BentoPDF: Stored XSS via Markdown Editor Leading to Persistent File Exfiltration

    BentoPDF is a client-side PDF toolkit that is self hostable. Prior to version 2.8.3, a cross-site scripting vulnerability was identified in BentoPD. An attacker may be able to execute arbitrary JavaScript in certain circumstances in Markdown to PDF Tool. This…

    alam00000 bentopdf