TI-2022-07690 CVE-2022-23638 · GHSA-fqx8-v33p-4qcc
Cross-site Scripting in svg-sanitizer
Priority LOW 29
svg-sanitizer is a SVG/XML sanitizer written in PHP.
Vulnerabilities
3 records
TI-2019-08037 CVE-2019-10772 · GHSA-8rc5-hx3v-2jg7
Cross-site scripting in enshrined/svg-sanitize
Priority LOW 29
It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the "xlink:href" attribute due to mishandling of the xlink namespace by the sanitizer.
TI-2019-13591 CVE-2019-18857 · GHSA-gf8j-v8x5-h9qp
darylldoyle svg-sanitizer before 0.12.0 mishandles script and data values in attributes…
Priority LOW 35
darylldoyle svg-sanitizer before 0.12.0 mishandles script and data values in attributes, as demonstrated by unexpected whitespace such as in the javascript	:alert substring.