CVE-2023-49146

Published November 22nd, 2023

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

DOMSanitizer (aka dom-sanitizer) before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions.

rhukster/dom-sanitizer

A simple but effective DOM/SVG/MathML Sanitizer for PHP 7.3+

GitHub

11