DOMPurify Prototype Manipulation

The vulnerability of the JavaScript library for secure cleaning and protection of HTML code, DOMPurify, is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected...

Cross site scripting in publify

Unrestricted file upload allowed the attacker to manipulate the request and bypass the protection of HTML files using a text file. Stored XSS may be obtained...