Lucene search

K
cvelistMozillaCVELIST:CVE-2021-23974
HistoryFeb 26, 2021 - 1:51 a.m.

CVE-2021-23974

2021-02-2601:51:50
mozilla
raw.githubusercontent.com
2

5.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.6%

The DOMParser API did not properly process ‘<noscript>’ elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.

5.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.6%