2 matches found
Novu has a XSS sanitization bypass
Summary XSS sanitization is incomplete, some attributes are missing such as oncontentvisibilityautostatechange=. This allows for the email preview to render HTML that executes arbitrary JavaScript, Details Sanitization is implemented here:...
6AI score
SaveExploits0References2Affected Software1
PT-2026-35092
Summary XSS sanitization is incomplete, some attributes are missing such as oncontentvisibilityautostatechange=. This allows for the email preview to render HTML that executes arbitrary JavaScript, Details Sanitization is implemented here:...
8.1CVSS6.1AI score
SaveExploits0References3
20