Lucene search

K

Html Sanitizer Security Vulnerabilities

cve
cve

CVE-2022-23499

HTML sanitizer is written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values. In versions prior to 1.5.0 or 2.1.1, malicious markup used in a sequence with special HTML CDATA sections cannot be filtered and sanitized due to a parsing issue in the upstr...

6.1CVSS

5.9AI Score

0.001EPSS

2022-12-13 09:15 PM
82
cve
cve

CVE-2022-36020

The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values. Due to a parsing issue in the upstream package masterminds/html5, malicious markup used in a sequence with special HTML comments cannot b...

6.1CVSS

5.8AI Score

0.001EPSS

2022-09-13 05:15 PM
58
4
cve
cve

CVE-2023-38500

TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed tags, attributes and values. Starting in version 1.0.0 and prior to versions 1.5.1 and 2.1.2, due to an encoding issue in the serialization layer, malicious mark...

6.1CVSS

5.9AI Score

0.001EPSS

2023-07-25 09:15 PM
26
cve
cve

CVE-2023-47125

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versions...

6.1CVSS

5.9AI Score

0.001EPSS

2023-11-14 08:15 PM
53