Lucene search

K
osvGoogleOSV:GHSA-PGWW-XF46-H92R
HistoryJan 07, 2021 - 9:54 p.m.

lxml vulnerable to Cross-site Scripting

2021-01-0721:54:01
Google
osv.dev
18

0.004 Low

EPSS

Percentile

73.1%

A XSS vulnerability was discovered in python-lxml’s clean module. The module’s parser didn’t properly imitate browsers, which caused different behaviors between the sanitizer and the user’s page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.

Rows per page:
1-10 of 941