CVE-2020-26293 : 詳細

CVE-2020-26293

6.1
/
中
0.34%V4
2021-01-04
18h20 +00:00
Cross-site Scripting
A03-Injection
Network
2024-08-04
15h56 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Possible XSS bypass if style tag is allowed

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style tag is allowed. If you have explicitly allowed the `