Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-14735
4.3
MEDIUMCVSS v2
Published
September 25, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.
nahsra/antisamy
GitHuba library for performing fast, configurable cleansing of HTML coming from untrusted sources
GitHuba library for performing fast, configurable cleansing of HTML coming from untrusted sources< 1.5.7NVD