mganss

Products

ProductCVEsExploitedLatest
HtmlSanitizer4–Oct 26, 2026

Exploited and recent CVEs

  • CVE-2026-116538 Medium 4.7 HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes 0.3%
  • CVE-2026-25543 Medium 6.3 HtmlSanitizer has a bypass via template tag 0.3%
  • CVE-2023-44390 Medium 6.1 HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content 0.4%
  • CVE-2020-26293 Medium 6.1 Possible XSS bypass if style tag is allowed 1.0%