Skip to content
OpenAdvisories

Vendor

Stirling-Tools

19 known vulnerabilities.

Products

Stirling-PDF 19
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.1
    CVE-2026-33436

    Stirling-PDF: Reflected XSS through crafted filename in file upload functionality

    Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. In versions prior to 2.0.0, file upload endpoints render user-supplied filenames directly into HTML using unsafe methods like innerHTML without sanitization. An…

    Stirling-Tools Stirling-PDF
  • Low 2.0
    CVE-2024-52286

    Self Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF

    Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In affected versions the Merge functionality takes untrusted user input (file name) and uses it directly in the creation of HTML pages allowing any un…

    Stirling-Tools Stirling-PDF
  • Low 2.6
    CVE-2024-9075

    Stirling-Tools Stirling-PDF Markdown-to-PDF cross site scripting

    A vulnerability was found in Stirling-Tools Stirling-PDF up to 0.28.3. It has been declared as problematic. This vulnerability affects unknown code of the component Markdown-to-PDF. The manipulation leads to cross site scripting. The attack can be initiated r…

    Stirling-Tools Stirling-PDF