Lucene search
+L

19 matches found

OSV
OSV
added 2026/06/12 8:7 p.m.13 views

GHSA-P5J5-4J3Q-8MQ8 TYPO3 HTML Sanitizer allows Cross-site Scripting

Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2. Credits to Doyensec in collaboration with Claude and Anthropic Research for reporting this vulnerability...

5.1CVSS5AI score0.00366EPSS
SaveExploits0References6
Rows per page
Query Builder