TYPO3 HTML Sanitizer allows Cross-site Scripting

Mô tả

Tham khảo

• TYPO3/html-sanitizer security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-47344 · ADVISORY
• TYPO3/html-sanitizer commit bd1a88d · WEB
• FriendsOfPHP/security-advisories · WEB
• TYPO3/html-sanitizer · PACKAGE
• typo3.org/security/advisory/typo3-core-sa-2026-006 · WEB

Lỗ hổng khác của typo3/html-sanitizer

• CVE-2026-47345TRUNG BÌNH 5.1Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanis…
• CVE-2023-47125TRUNG BÌNH 6.1TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions…
• CVE-2023-38500TRUNG BÌNH 6.1TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed ta…
• CVE-2022-23499TRUNG BÌNH 6.1HTML sanitizer is written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values. In versions pri…
• CVE-2022-36020TRUNG BÌNH 6.1The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, a…