Description
Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped print_r output."
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | ezyang/htmlpurifier | < 2.0.1 | 2.0.1 | GHSA-6fh7-fwqj-mv49 |
References
- htmlpurifier-configform-xss(35300) vdb-entry
- 36722 vdb-entry
- http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.0.1/NEWS
- 24699 vdb-entry