cure53/dompurify · Security
dompurify vulnerable to Cross-site Scripting
- GHSA ID
- GHSA-h6p3-p4vx-wr8q
- Severity
- medium
- Published
- Updated
Description
dompurify prior to version 2.2.3 is vulnerable to a cross-site scripting problem caused by nested headlines.