Lucene search
Veracode Vulnerability DatabaseVERACODE:25408HistoryMay 14, 2020 - 3:58 a.m.
Cross-Site Scripting (XSS)
2020-05-1403:58:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
21.2%
t3g/svg-sanitizer is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject and execute arbitrary Javascript in a user’s browser via SVG markup due to lack of sanitization of the markup.
| CPE | Name | Operator | Version |
|---|---|---|---|
| t3g/svg-sanitizer | le | 1.0.2 |
Related
osv
osv
CVE-2020-11070
2020-05-13 19:15:11
Cross-Site Scripting in SVG Sanitizer
2020-05-13 22:17:34
typo3
typo3
Cross-Site Scripting in "SVG Sanitizer" (svg_sanitizer)
2020-05-12 00:00:00
cve
cve
CVE-2020-11070
2020-05-13 19:15:11
cvelist
cvelist
CVE-2020-11070 Cross-Site Scripting in SVG Sanitizer
2020-05-13 18:40:11
github
github
Cross-Site Scripting in SVG Sanitizer
2020-05-13 22:17:34
prion
prion
Cross site scripting
2020-05-13 19:15:00
nvd
nvd
CVE-2020-11070
2020-05-13 19:15:11