Threats tagged 'ghsa-g32m-chc6-3wqf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-116802DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL Medium5.12026-10-27GCVE DatabaseCVE-2026-116802 DOMPurify versions before 3.4.17 contain a cross-site scripting (XSS) vulnerability. This flaw allows attackers to bypass the SMIL attributeName=href guard when parsing application/xhtml+xml content because attribute names are not properly lowercased. An attacker can craft SVG content with animate or set elements using attributeName="href" and a javascript: URI to execute scripts when users click the sanitized link. Report on CVE-2026-116802 Vulnerability CWE-79 #ghsa-g32m-chc6-3wqf	GCVE Database	2026-10-27

Page 1 of 1