Skip to content
OpenAdvisories

Package · NuGet

HtmlSanitizer

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-25543

    HtmlSanitizer has a bypass via template tag

    HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. Prior to versions 9.0.892 and 9.1.893-beta, if the template tag is allowed, its contents are not sanitized. The template tag is a special t…

    mganss HtmlSanitizer HtmlSanitizer NuGet
  • Medium 6.1
    CVE-2023-44390

    HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content

    HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. The vulnerability occurs in configurations where foreign content is allowed, i.e. either `svg` or `math` are in the list of allowed element…

    mganss HtmlSanitizer HtmlSanitizer NuGet
  • Medium 6.1
    CVE-2020-26293

    Possible XSS bypass if style tag is allowed

    HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style tag is allowed. If you have explicitly allowed the `<style…

    mganss HtmlSanitizer HtmlSanitizer NuGet