Vendor
critical
advisory
Multiple Sanitization Bypass Vulnerabilities in justhtml Library
3 TTPs 1 CVEThe justhtml library before version 1.15.0 contains multiple vulnerabilities in URL sanitization, HTML serialization, and Markdown passthrough that allow attackers to inject malicious HTML and JavaScript.
justhtml +2
xss
injection
library-vulnerability
3t
1c
high
advisory
JustHTML XSS Vulnerability via Code Fence Breakout
2 rules 1 TTPJustHTML versions 1.12.0 and earlier are vulnerable to cross-site scripting (XSS) by manipulating the contents of a <pre> element to inject HTML code outside of the intended code block, potentially leading to arbitrary JavaScript execution.
JustHTML
xss
markdown
2r
1t