Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DOMPurify 跨站脚本漏洞
Vulnerability Description
DOMPurify是一款使用JavaScript编写的，用于HTML、MathML和SVG的DOM（文档对象模型）。 DOMPurify 2.0.17版本存在跨站脚本漏洞，该漏洞源于serialize-parse往返并不一定返回原来的DOM树,和一个名称空间可以改变从HTML到MathML,证明了嵌套的表单元素。
CVSS Information
N/A
Vulnerability Type
N/A