| Package | Affected versions | Patched versions |
|---|---|---|
| ezyang/htmlpurifier | < 2.0.1 | 2.0.1 |
| htmlpurifier | = 2.0.0 |
Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped print_r output."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free