Skip to content
OpenAdvisories

Package · Packagist

ezyang/htmlpurifier

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.3
    CVE-2011-3744

    HTML Purifier allows remote attackers to obtain sensitive information

    HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/PHPT/Reporter/SimpleTest.php and certain other files.

    ezyang/htmlpurifier php-htmlpurifier Ubuntu Packagist
  • Medium —
    CVE-2010-4183

    HTML Purifier cross-site scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading S…

    ezyang/htmlpurifier php-htmlpurifier Debian Packagist
  • Medium —
    CVE-2010-2479

    HTML Purifier Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    ezyang/htmlpurifier php-htmlpurifier Debian Packagist
  • Medium 6.1
    CVE-2007-3498

    HTML Purifier Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped print_r output."

    ezyang/htmlpurifier Packagist