I'm testing a web application where user input is directly inserted into a PDF file which can then be downloaded.
The user input is accepted as is, without encoding or any other modification. This behaviour is usually exploitable. For instance with csv files you could inject formulas. On web applications this obviously opens up XSS.
Are there any attack vectors for PDF files or the PDF generator in the background with unfiltered user input?