Tripexpress Project Tripexpress — known CVE vulnerabilities

Every CVE whose affected-product data names Tripexpress Project Tripexpress, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2021-43691 — CVSS 9.8 (critical): tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/load_font.php. The variable src is coming…