Cross-site Scripting (XSS)

typo3/html-sanitizer is vulnerable to cross-site scripting. The vulnerability exists due to the vulnerable masterminds/html5 dependency used in composer.json, which does not properly sanitize the comment end bang state in the isCommentEnd function of Tokenizer.php, allowing an attacker to inject...