Vulnerabilities (CVE)

Filtered by vendor Getgrav Subscribe
Filtered by product Dom-sanitizer
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-49146 1 Getgrav 1 Dom-sanitizer 2024-02-28 N/A 6.1 MEDIUM
DOMSanitizer (aka dom-sanitizer) before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions.