Dhtmlx

6 CVEs across 5 Dhtmlx products. Browse Dhtmlx vulnerabilities, severities, and proof-of-concept exploits.

Dhtmlx products with known CVEs

ProductCVEs
File Explorer2
Pdf Export Module2
Pdf Export Module2
Dhtmlxspreadsheet1
Diagram1
Dhtmlx CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-71822026-05-15Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload…
CVE-2026-41553Critical10.02026-05-15PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthe…
CVE-2026-41552High7.52026-05-15PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user could…
CVE-2024-55214Medium6.52025-02-07Local File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the file download functionality.
CVE-2024-55213Medium6.52025-02-07Directory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the File Listing function.
CVE-2013-62812013-10-25Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers to…