The vulnerability of the HTMLSerializer class implementation in the sanitizer framework allows attackers to perform cross-site scripting attacks by exploiting it.

The vulnerability of the HTMLSerializer class implementation in the sanitization of user-input data based on the AntiSamy policy file is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site...