CVE-2026-24737
jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution
CVSS score
8.1
EPSS probability
%0.6
Risk score
0.0
Published
8 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.2
CVE-2025-68428jsPDF has Local File Inclusion/Path Traversal vulnerability
Patch verifiedEPSS %2
8.1
CVE-2026-25755jsPDF has PDF Object Injection via Unsanitized Input in addJS Method
Patch verifiedEPSS %1
8.1
CVE-2026-31898jsPDF has a PDF Object Injection via FreeText color
Patch verifiedEPSS %1
9.6
CVE-2026-31938jsPDF has HTML Injection in New Window paths
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-24737"