Filtered by vendor Getgrav Subscriptions
Filtered by product Dom-sanitizer Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-49146 1 Getgrav 1 Dom-sanitizer 2024-11-21 6.1 Medium
DOMSanitizer (aka dom-sanitizer) before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions.