← Back

Tripexpress

tripexpress

Vendor: Tripexpress Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-43691
1Tripexpress Project
1Tripexpress
Jun 17, 2026
Nov 29, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/load_font.php. The variable src is coming from $_SERVER["argv"] then there is a path manipulation vulnerability.