CVE-2020-26293:詳細資料

CVE-2020-26293

6.1
/
中危
0.34%V4
2021-01-04
18h20 +00:00
Cross-site Scripting
A03-Injection
Network
2024-08-04
15h56 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Possible XSS bypass if style tag is allowed

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style tag is allowed. If you have explicitly allowed the `