Skip to content
OpenAdvisories

Package · Debian

php-htmlpurifier

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2010-4183

    HTML Purifier cross-site scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading S…

    ezyang/htmlpurifier php-htmlpurifier Debian Packagist
  • Medium —
    CVE-2010-2479

    HTML Purifier Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    ezyang/htmlpurifier php-htmlpurifier Debian Packagist