7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.7%
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.
www.securityfocus.com/bid/95101
www.securitytracker.com/id/1037532
github.com/nahsra/antisamy/issues/2