CVE-2019-16728: Improper Neutralization of Input During Web Page Generation

DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS mXSS for an SVG element or a MATH element, as demonstrated by Chrome and Safari...

Google Chrome < 62.0.3202.62 Multiple Vulnerabilities

Binary data 700346.pasl...

Cross-site Scripting (XSS)

dompurify is vulnerable to cross-site scripting vulnerability. It is possible because of a broken logical check in handling both the recent Safari DOMParser XSS and a Firefox mXSS...

Cross-site Scripting (XSS)

Overview angularjs is a Affected versions of this package are vulnerable to Cross-site Scripting XSS. This error occurs when $sanitize sanitizer tries to check the input for possible mXSS payload and the verification errors due to the input mutating indefinitely. This could be a sign that the...