Lucene search
+L

1 matches found

OSV
OSV
added 2025/03/14 6:56 p.m.13 views

CVE-2025-29771 HtmlSanitizer vulnerable to XSS when used with contentEditable

HtmlSanitizer is a client-side HTML Sanitizer. Versions prior to 2.0.3 have a cross-site scripting vulnerability when the sanitizer is used with a contentEditable element to set the elements innerHTML to a sanitized string produced by the package. If the code is particularly crafted to abuse the...

5.3CVSS6.1AI score
SaveExploits0References4
Rows per page
Query Builder