Lucene search
+L

1 matches found

OSV
OSV
added 2020/02/24 5:33 p.m.12 views

GHSA-Q65M-PV3F-WR5R XSS in Bleach when noscript and raw tag whitelisted

Impact A mutation XSS affects users calling bleach.clean with noscript and a raw tag see below in the allowed/whitelisted tags option. Patches v3.1.1 Workarounds modify bleach.clean calls to not whitelist noscript and one or more of the following raw tags: title textarea script style noembed...

6.1CVSS6.9AI score0.01688EPSS
SaveExploits1References12
Rows per page
Query Builder