An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message.