| Package | Affected versions | Patched versions |
|---|---|---|
| org.owasp.antisamy:antisamy | < 1.5.5 | 1.5.5 |
| antisamy | < 1.5.5 | 1.5.5 |
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free