Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/03/14 7:54 p.m.21 views

JS Html Sanitizer allows XSS when used with contentEditable

Impact XSS vulnerability when the sanitizer is used with a contentEditable element to set the elements innerHTML to a sanitized string produced by the package. If the code is particularly crafted to abuse the code beautifier, that runs AFTER sanitation. Patches Patched in version 2.0.3...

5.3CVSS6.8AI score0.00373EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder