Lucene search
+L

1 matches found

RustSec
RustSec
added 2025/09/21 12:0 p.m.14 views

Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal

Affected versions of this crate did not correctly strip namespace-incompatible tags in certain situations, causing it to incorrectly account for differences between HTML, SVG, and MathML. This vulnerability only has an effect when the svg or math tag is allowed, because it relies on a tag being...

6.9AI score
SaveExploits0Affected Software1
Rows per page
Query Builder