The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than…
CVSS 3.0MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.0216·Published 2017-02-22·Fixed in 0.99999999CWE-79
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.
CVSS 3.0MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.0216·Published 2017-02-22·Fixed in 0.999999999CWE-79