OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT…
CVSS 2.0LOW 2.6·Network·No auth·Interaction —·EPSS 0.01366·Published 2011-11-17·Fixed in 88CWE-200