Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: mganss Clear all filters
TI-2026-80455 CVE-2026-116538 · GHSA-qw8f-hph4-7r4g

Cross-site scripting in HtmlSanitizer via SanitizeDom attributes

Priority LOW 12

HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scripting vulnerability because SanitizeDom(string) never sanitizes attributes on the html and body wrapper elements.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00287 Published 2026-10-26 Fixed in 9.2.1039, 10.0.1037-beta CWE-79
TI-2026-20652 CVE-2026-25543 · GHSA-j92c-7v7g-gj3f

HtmlSanitizer has a bypass via template tag

Priority LOW 34

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00274 Published 2026-02-04 Fixed in 9.0.892, 9.1.893-beta CWE-116
TI-2020-16114 CVE-2020-26293 · GHSA-8j9v-h2vp-2hhv

Possible XSS bypass if style tag is allowed

Priority LOW 29

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0101 Published 2021-01-04 Fixed in 5.0.372 CWE-74