Search: CVE-2025-55166

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.5%	CVE-2025-55166darylldoyle svg-sanitizer · Cross-site Scripting Medium5.1EPSS 0.5%2025-08-12CVE Database V5CVE-2025-55166 savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting or linking to external domains. This issue has been patched in version 0.22.0. EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2025-08-12

Page 1 of 1