CVE-2019-8924: Apachefriends Xampp

Medium severity, CVSS 6.1. EPSS: 5.7% chance of exploitation in the next 30 days.

XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued.

Affected products

• Apachefriends Xampp: up to and including 5.6.8

Published 2019-05-17. Last modified 2026-06-17.