Back to search
CVE-2016-10006
Published: Dec 24, 2016
Modified: Aug 6, 2024
PUBLISHED
Description
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
1037532
vdb-entry
x_refsource_SECTRACK
https://github.com/nahsra/antisamy/issues/2
x_refsource_CONFIRM
95101
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now