Lucene search
K

A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True.

🗓️ 03 Sep 2025 21:19:28Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 1 Views

Mutation XSS when bleach.clean allows svg or math in p or br and tags with strip_comments False.

Related
ReporterTitlePublishedViews
Family
AlpineLinux
CVE-2021-23980
16 Feb 202300:00
alpinelinux
AstraLinux
Astra Linux - уязвимость в python-bleach
3 May 202623:59
astralinux
Circl
CVE-2021-23980
17 Feb 202300:18
circl
CNNVD
Python Bleach 跨站脚本漏洞
6 Apr 202100:00
cnnvd
CVE
CVE-2021-23980
16 Feb 202300:00
cve
Cvelist
CVE-2021-23980
16 Feb 202300:00
cvelist
Debian
[SECURITY] [DLA 2620-1] python-bleach security update
6 Apr 202112:22
debian
Debian
[SECURITY] [DSA 4892-1] python-bleach security update
18 Apr 202114:41
debian
Debian
[SECURITY] [DSA 4892-1] python-bleach security update
18 Apr 202114:41
debian
Debian CVE
CVE-2021-23980
16 Feb 202300:00
debiancve
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation