Read the docs

mganss

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

mganss records in CISA KEV

No mganss vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Htmlsanitizer 3 records LOW

Records

4 records

TI-2026-20652 CVE-2026-25543 · GHSA-j92c-7v7g-gj3f

HtmlSanitizer has a bypass via template tag

Priority LOW 34

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00274 Published 2026-02-04 Fixed in 9.0.892, 9.1.893-beta CWE-116
TI-2020-16114 CVE-2020-26293 · GHSA-8j9v-h2vp-2hhv

Possible XSS bypass if style tag is allowed

Priority LOW 29

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0101 Published 2021-01-04 Fixed in 5.0.372 CWE-74
TI-2026-80455 CVE-2026-116538 · GHSA-qw8f-hph4-7r4g

Cross-site scripting in HtmlSanitizer via SanitizeDom attributes

Priority LOW 12

HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scripting vulnerability because SanitizeDom(string) never sanitizes attributes on the html and body wrapper elements.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00287 Published 2026-10-26 Fixed in 9.2.1039, 10.0.1037-beta CWE-79
Open these records in search →