3 matches found
CVE-2021-46871
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
6.1CVSS6AI score
SaveExploits0References2
CVE-2021-46871
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
6.1AI score0.00415EPSS
SaveExploits0References2
CVE-2021-46871
Summary: CVE-2021-46871 affects Phoenix.HTML (Phoenix HTML) tag.ex prior to 3.0.4, where HEEx class attributes can trigger XSS. The root cause is insufficient escaping in tag.ex within phoenix_html before version 3.0.4. Details from provided documents: Affected component: phoenix_html (tag.ex); v...
6.1CVSS5.9AI score0.00415EPSS
SaveExploits0References2Affected Software1
20