Lucene search

K
osvGoogleOSV:GHSA-6RM6-MJMH-86JQ
HistoryMay 17, 2022 - 5:49 a.m.

HTML Purifier Cross-site Scripting (XSS) vulnerability

2022-05-1705:49:44
Google
osv.dev
6
html purifier
cross-site scripting
internet explorer
web script
mahara

AI Score

6

Confidence

High

EPSS

0.003

Percentile

68.6%

Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Score

6

Confidence

High

EPSS

0.003

Percentile

68.6%