Tag

Sanitization

1 brief RSS

sanitize-html XSS Vulnerability via XMP Tag Bypass (CVE-2026-44990)

sanitize-html version 2.17.3 and earlier is vulnerable to cross-site scripting (XSS) due to the improper handling of the `xmp` tag, allowing attackers to inject arbitrary HTML and JavaScript code.

sanitize-html xss javascript sanitization

2r 1t 2h ago