RSS   Vulnerabilities for 'Dompurify'   RSS

2019-09-24
 
CVE-2019-16728

CWE-79
 

 
DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome and Safari.

 


Copyright 2024, cxsecurity.com

 

Back to Top