Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: TYPO3 Component: Html Sanitizer Clear all filters
TI-2023-19880 CVE-2023-38500 · GHSA-59jf-3q9v-rh6g

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Priority LOW 28

TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed tags, attributes and values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00508 Published 2023-07-25 Fixed in 1.5.1, 2.1.2 CWE-79
TI-2022-07558 CVE-2022-23499 · GHSA-hvwx-qh2h-xcfj

Cross-Site Scripting Protection bypass in HTML Sanitizer

Priority LOW 28

HTML sanitizer is written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00468 Published 2022-12-13 Fixed in 1.5.0, 2.1.1 +3 CWE-79
TI-2022-16445 CVE-2022-36020 · GHSA-47m6-46mj-p235

Bypass of Cross-Site Scripting Protection in typo3/html-sanitizer

Priority LOW 29

The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00842 Published 2022-09-13 Fixed in 1.0.7, 2.0.16 +2 CWE-79