Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/03 6:31 p.m.11 views

GHSA-V8JM-5VWX-CFXM DOMPurify contains a Cross-site Scripting vulnerability

DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textarea rawtext element validation in the SAFEFORXML regex. Attackers can include closing rawtext tags like in attribute...

6.1CVSS5.9AI score0.00245EPSS
SaveExploits0References5
Rows per page
Query Builder