[MEDIUM] Spipu HTML2PDF vulnerable to cross-site scripting

PKSA-qp93-gcmr-1p3z CVE-2023-39062 GHSA-99fg-2h75-m92h

Affected package: spipu/html2pdf

Affected version: <5.2.8

Reported by:
GitHub