CVE-2019-16728
CVE-2019-16728
This page contains facts from public vulnerability sources. Check the original advisory before updating.
DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome and Safari.
CVSS 6.1 · Medium · EPSS 1.5% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
dompurify npm
- Affected ranges
- SEMVER: < 2.0.3
Update to 2.0.3
dompurify.js Ubuntu:18.04:LTS
- Versions
- 0.9.0~dfsg1-1
- 0.9.0~dfsg1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published