The vulnerability of the HTMLSerializer class implementation in the sanitizer framework allows attackers to perform cross-site scripting attacks by exploiting it.

The vulnerability of the HTMLSerializer class implementation in the sanitization of user-input data based on the AntiSamy policy file is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site...

PT-2017-4097

Name of the Vulnerable Software and Affected Versions OWASP AntiSamy versions prior to 1.5.7 Description The issue allows for cross-site scripting XSS attacks via HTML5 entities. This is demonstrated by the use of to construct a javascript: URL. The vulnerability is related to the implementation ...