Skip to content
OpenAdvisories

Package · Packagist

typo3/html-sanitizer

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2026-47344

    TYPO3 HTML Sanitizer allows Cross-Site Scripting

    When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-sit…

    TYPO3 HTML Sanitizer typo3/html-sanitizer Packagist