cure53/dompurify · Security
dompurify vulnerable to Cross-site Scripting
- GHSA ID
- GHSA-pgjv-jrg2-gq3v
- Severity
- medium
- Published
- Updated
Description
dompurify prior to version 2.2.2 is vulnerable to cross-site scripting when converting from SVG namespace.