Lucene search

K
osvGoogleOSV:GHSA-3P68-M5QW-9G9W
HistoryMay 13, 2022 - 1:07 a.m.

HTML Purifier cross-site scripting (XSS) vulnerability

2022-05-1301:07:48
Google
osv.dev
4

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479.

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%